chore(deps): update docker.io/tailscale/tailscale docker tag to v1.96.5

[renovate-bot-cbcoutinho]

This PR contains the following updates:

Package	Update	Change
docker.io/tailscale/tailscale (source)	minor	v1.94.2 → v1.96.5

---

Release Notes

tailscale/tailscale (docker.io/tailscale/tailscale)

v1.96.5

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[claude]

PR Review

Type: Automated dependency update (Renovate Bot)
Change: Tailscale Docker image bump v1.94.2 → v1.96.5

Assessment: LGTM

This is a minor version bump of the Tailscale sidecar container used in the claude-funnel profile. The diff is minimal and correct:

• SHA pinning preserved: The image digest is updated alongside the tag (sha256:dbeff02...), maintaining the security best practice of pinning to a specific digest rather than relying on a mutable tag alone.
• No application logic changes: This only affects the tailscale-mcp service in docker-compose.yml, which is a network sidecar — no code, configuration schema, or MCP tool behavior is affected.
• Minor version jump: v1.94.2 → v1.96.5 is a minor update (two minor versions). Tailscale minor releases typically contain bug fixes, performance improvements, and new features — no breaking changes expected for sidecar usage.

Considerations

• The tailscale-mcp service is only activated under the login-flow + claude-funnel profile, so this has no impact on the default single-user or standard multi-user deployments.
• Tailscale changelog between these versions can be reviewed at the compare link if desired, but for a sidecar used purely as a network transport, the risk is low.

Safe to merge.