Replace the pinned Tailscale minor allowlist with a numeric minimum-version
comparison (floor 1.80) so current releases like 1.102.2 pass --doctor while
1.78 and malformed output are still rejected; add boundary + malformed unit
coverage. Correct broker lifecycle commands to the installed unit name
paperclip-tailscale-https-broker and document copying the built package to
/opt/paperclip/packages/tailscale-https-broker to match ExecStart and doctor.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>