rego-tunnel: wire TSCLIENT + fix CIDR defaults

apps/rego-tunnel/build/start-dnsmasq.sh

@@ -2,13 +2,17 @@
 set -euo pipefail
 
 BRIDGE_NAME="${BRIDGE_NAME:-br-rego-vpn}"
-BRIDGE_CIDR="${BRIDGE_CIDR:-100.100.0.1}/24"
+BRIDGE_CIDR="${BRIDGE_CIDR:-100.100.0.1}"
 VM_NET_IP="${VM_NET_IP:-100.100.0.2}"
 VM_MAC="${VM_MAC:-52:54:00:12:34:56}"
 
 LEASE_TIME="${LEASE_TIME:-12h}"
 DNS_SERVERS="${DNS_SERVERS:-1.1.1.1,8.8.8.8}"
 
+if [[ "$BRIDGE_CIDR" != */* ]]; then
+	BRIDGE_CIDR="$BRIDGE_CIDR/24"
+fi
+
 GATEWAY_IP="${BRIDGE_CIDR%%/*}"
 
 mkdir -p /etc/dnsmasq.d