Revert: drop the phone road-warrior OpenVPN attempt

Rolled back per the user's request. Three variants were tried on ru-vps
(static key; TLS peer-fingerprint p2p; server mode with push routes and an
inline <ca>). The server side worked each time, but the "OpenVPN for
Android" client consistently failed at config build ("Used 101 tries to
get current version of the profile"), which looks like an app/OS issue
rather than the config.

Repo: remove playbooks/openvpn-phone.yml, its Make target, and the shared
homelab_vpn_client_routes var; restore openvpn-laptop.yml to its prior
state (its pre-existing `become: false` on delegate_to: localhost is noted
in plan.md, left untouched). ru-vps teardown done out of band: unit, tun2,
ufw/nat rules for 9444 and 10.80.0.0/29, and /etc/openvpn/homelab-phone
removed; the site tunnel (homelab-openvpn, tun0) was not touched and is
verified active.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01KbuZrUoevfBgCpf5DCF4DG

ansible/inventory/group_vars/all/main.yml

@@ -23,19 +23,6 @@ homelab_service_range: 192.168.1.5-192.168.1.40
 # Total votes меньше Expected votes и флаг NV у узлов.
 homelab_pve_egress_ip: 85.143.112.108
 
-# Маршруты, которые road-warrior профили (openvpn-laptop.yml, openvpn-phone.yml)
-# добавляют клиенту. НЕ весь homelab_lan_cidr: домашняя сеть клиента почти
-# наверняка тоже 192.168.1.0/24, полный /24 перебил бы её. Диапазон покрывает
-# 192.168.1.5-.7, .8-.15, .16-.31, .32-.39, .40 — все managed-хосты и дашборд
-# (192.168.1.30), но не роутер (.1) и не игровой сервер (.100).
-homelab_vpn_client_routes:
-  - {network: 192.168.1.5, netmask: 255.255.255.255}
-  - {network: 192.168.1.6, netmask: 255.255.255.254}
-  - {network: 192.168.1.8, netmask: 255.255.255.248}
-  - {network: 192.168.1.16, netmask: 255.255.255.240}
-  - {network: 192.168.1.32, netmask: 255.255.255.248}
-  - {network: 192.168.1.40, netmask: 255.255.255.255}
-
 openvpn_network_cidr: 10.78.0.0/30
 openvpn_listen_port: 8443
 openvpn_forwarded_services: