Simplify rego-tunnel: remove SOCKS5, use portproxy instead

- Remove SOCKS5 socat forwarder from start.sh
- Add SSH to VM on port 2222 (socat)
- Add port 22 DNAT for IBM i SSH via portproxy
- Remove SOCKS5 proxy startup from vpn-login.js
- Remove SOCKS5 restart from watchdog reconnect

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

apps/rego-tunnel/vpn_scripts/vpn-login.js

@@ -274,28 +274,17 @@ async function main() {
   await sleep(2000);
   ws.close();
 
-  // Verify VPN connection before starting SOCKS5
+  // Verify VPN connection
   const vpnConnected = await verifyVpnConnection();
 
   if (!vpnConnected) {
     log("ERROR: VPN connection could not be verified");
-    log("SOCKS5 proxy NOT started");
     process.exit(1);
   }
 
-  // Start SOCKS5 proxy only after VPN verified
-  log("Starting SOCKS5 proxy on port 1080...");
-  run("taskkill /F /IM node.exe /FI \"WINDOWTITLE eq socks5\"");
-  spawn("node", ["" + require("path").join(require("os").homedir(), "vpn_scripts", "socks5.js") + ""], {
-    detached: true,
-    stdio: "ignore",
-    windowsHide: true
-  }).unref();
-
   console.log("");
   console.log("========================================");
-  console.log("     CONNECTED!");
-  console.log("     SOCKS5 proxy: 172.30.0.16:1080");
+  console.log("     VPN CONNECTED!");
   console.log("     Entering watchdog mode...");
   console.log("========================================");
   console.log("");
@@ -439,13 +428,6 @@ async function reconnectVpn() {
   const verified = await verifyVpnConnection();
   if (verified) {
     log("Reconnection successful!");
-    // Restart socks5
-    run("taskkill /F /IM node.exe /FI \"WINDOWTITLE eq socks5\"");
-    spawn("node", ["" + require("path").join(require("os").homedir(), "vpn_scripts", "socks5.js") + ""], {
-      detached: true,
-      stdio: "ignore",
-      windowsHide: true
-    }).unref();
     return true;
   }