Move the deploy runner onto the tailnet, skip Tailscale OIDC

Move the GitHub Actions deploy runner onto the tailnet, skip the ephemeral Tailscale OIDC handshake. Add join-tailnet and send-revision toggles.