Update Legion LAN IP from 192.168.68.77 to 192.168.8.148

Static IP assigned on new network segment. Updates:
- variables.tf default legion_ip
- headscale nameserver config
- bootstrap.sh default target
- README/RUNBOOK documentation
- media ingress comment

servers/legion/RUNBOOK.md

@@ -47,11 +47,11 @@ source ~/Secrets/credentials/infrastructure.env
 
 ## Step 2 — Provision Fresh Machine
 
-Fresh Ubuntu 24.04 LTS, same LAN IP (`192.168.68.77`).
+Fresh Ubuntu 24.04 LTS, same LAN IP (`192.168.8.148`).
 
 ```bash
 # From Mac — copy SSH key and cloudflared credentials
-ssh-copy-id will@192.168.68.77
+ssh-copy-id will@192.168.8.148
 scp ~/Secrets/certs/cloudflared-gitea.json legion:/tmp/cloudflared-gitea.json
 
 # Run bootstrap
@@ -135,7 +135,7 @@ kubectl get pods -A | grep -v Running | grep -v Completed
 kubectl get applications -n argocd
 
 # DNS working (AdGuard)
-dig @192.168.68.77 git.neuralplatform.ai
+dig @192.168.8.148 git.neuralplatform.ai
 
 # Services reachable
 curl -sk https://git.neuralplatform.ai/api/v1/version