Add Salamander obfs branch: replace masquerade with packet obfuscation.

- ACME TLS challenge on 443 (no port 80 or nginx decoy)
- Auto-generate and persist obfs password per server
- Update client export, HTML catalog, and vault examples
- Document Salamander vs main and ACME auto-renewal in README

Co-authored-by: Cursor <cursoragent@cursor.com>

roles/hysteria2/tasks/main.yml

@@ -7,6 +7,10 @@
   ansible.builtin.import_tasks: users.yml
   tags: [install, update, export]
 
+- name: Resolve Salamander obfs password
+  ansible.builtin.import_tasks: obfs.yml
+  tags: [install, update, export]
+
 - name: Install packages and Hysteria2 binary
   ansible.builtin.import_tasks: install.yml
   tags: [install]