fix: generate VPN passwords without pwgen, set EDITOR=nano

Use Ansible password lookup on the control node so install works before packages are installed on VPS and without pwgen on macOS. Export EDITOR=nano in Makefile for vault-edit.

Makefile

@@ -5,6 +5,8 @@
 SHELL := /bin/bash
 .DEFAULT_GOAL := help
 
+export EDITOR="nano"
+
 ANSIBLE         ?= ansible-playbook
 ANSIBLE_ADHOC   ?= ansible
 INVENTORY       ?= inventory/hosts.yml
@@ -60,7 +62,7 @@ init: ## Создать inventory, group_vars и .vault_pass из примеро
 	@echo "$(GREEN)Готово. Отредактируйте:$(NC)"
 	@echo "  inventory/hosts.yml"
 	@echo "  group_vars/all.yml"
-  @echo "  group_vars/hysteria2_servers/vault.yml  → затем: make vault-encrypt"
+	@echo "  group_vars/hysteria2_servers/vault.yml  → затем: make vault-encrypt"
 
 check: ## Проверить синтаксис playbook
 	$(ANSIBLE) playbook.yml --syntax-check $(VAULT_ARGS)