Revert: drop the phone road-warrior OpenVPN attempt

Rolled back per the user's request. Three variants were tried on ru-vps
(static key; TLS peer-fingerprint p2p; server mode with push routes and an
inline <ca>). The server side worked each time, but the "OpenVPN for
Android" client consistently failed at config build ("Used 101 tries to
get current version of the profile"), which looks like an app/OS issue
rather than the config.

Repo: remove playbooks/openvpn-phone.yml, its Make target, and the shared
homelab_vpn_client_routes var; restore openvpn-laptop.yml to its prior
state (its pre-existing `become: false` on delegate_to: localhost is noted
in plan.md, left untouched). ru-vps teardown done out of band: unit, tun2,
ufw/nat rules for 9444 and 10.80.0.0/29, and /etc/openvpn/homelab-phone
removed; the site tunnel (homelab-openvpn, tun0) was not touched and is
verified active.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01KbuZrUoevfBgCpf5DCF4DG

ansible/playbooks/openvpn-laptop.yml

@@ -16,8 +16,19 @@
     laptop_openvpn_client_ip: 10.79.0.2
     laptop_openvpn_remote: 157.22.231.198
     laptop_openvpn_client_config_local: "{{ playbook_dir }}/../generated/{{ laptop_profile_name }}.ovpn"
-    # Общий список с openvpn-phone.yml — см. group_vars/all/main.yml.
-    laptop_openvpn_home_routes: "{{ homelab_vpn_client_routes }}"
+    laptop_openvpn_home_routes:
+      - network: 192.168.1.5
+        netmask: 255.255.255.255
+      - network: 192.168.1.6
+        netmask: 255.255.255.254
+      - network: 192.168.1.8
+        netmask: 255.255.255.248
+      - network: 192.168.1.16
+        netmask: 255.255.255.240
+      - network: 192.168.1.32
+        netmask: 255.255.255.248
+      - network: 192.168.1.40
+        netmask: 255.255.255.255
 
   tasks:
     - name: Install OpenVPN packages
@@ -145,10 +156,8 @@
         path: "{{ playbook_dir }}/../generated"
         state: directory
         mode: "0700"
+      become: false
       delegate_to: localhost
-      vars:
-        ansible_connection: local
-        ansible_become: false
 
     - name: Write local laptop OpenVPN profile
       ansible.builtin.copy:
@@ -173,10 +182,8 @@
           <secret>
           {{ laptop_openvpn_static_key_raw.content | b64decode }}
           </secret>
+      become: false
       delegate_to: localhost
-      vars:
-        ansible_connection: local
-        ansible_become: false
       no_log: true
 
   handlers: