fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip]

6d224861 came from a --no-checkout worktree whose empty index made the
commit drop every file except two. This restores 05b50d2b's full tree and
correctly adds stacks/stem95su/gdrive-sync.tf + the service-catalog stem95su
entry. Forward-only (parent=6d224861, no force-push); [ci skip] since the
live infra was never applied from the broken commit.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

stacks/xray/modules/xray/xray_config.json.tpl

@@ -0,0 +1,80 @@
+{
+  "log": {
+    "loglevel": "none"
+  },
+  "inbounds": [
+    {
+      "port": 7443,
+      "protocol": "vless",
+      "settings": {
+        "clients": ${clients},
+        "decryption": "none"
+      },
+      "streamSettings": {
+        "network": "tcp",
+        "security": "reality",
+        "realitySettings": {
+          "show": false,
+          "dest": "www.cloudflare.com:443",
+          "xver": 0,
+          "serverNames": [
+            "www.cloudflare.com"
+          ],
+          "privateKey": "${reality_private_key}",
+          "shortIds": ${reality_short_ids}
+        }
+      }
+    },
+    {
+      "port": 8443,
+      "protocol": "vless",
+      "settings": {
+        "clients": ${clients},
+        "decryption": "none"
+      },
+      "streamSettings": {
+        "network": "ws",
+        "security": "none",
+        "tlsSettings": {
+          "certificates": [
+            {
+              "certificateFile": "/etc/xray/tls.crt",
+              "keyFile": "/etc/xray/tls.key"
+            }
+          ]
+        },
+        "wsSettings": {
+          "path": "/ws"
+        }
+      }
+    },
+    {
+      "port": 9443,
+      "protocol": "vless",
+      "settings": {
+        "clients": ${clients},
+        "decryption": "none"
+      },
+      "streamSettings": {
+        "network": "xhttp",
+        "security": "none",
+        "tlsSettings": {
+          "certificates": [
+            {
+              "certificateFile": "/etc/xray/tls.crt",
+              "keyFile": "/etc/xray/tls.key"
+            }
+          ]
+        },
+        "xhttpSettings": {
+          "path": "/grpc-vpn"
+        }
+      }
+    }
+  ],
+  "outbounds": [
+    {
+      "protocol": "freedom"
+    }
+  ]
+}