STEP_029C_LEGACY_EGRESS_AUTOMATION_FROZEN OK
timestamp: 20260708-083629

VM101 legacy VPN/HMN automation frozen.

Completed:
- Legacy cron tasks disabled with STEP_029C1_DISABLED comments.
- Legacy hotplug scripts moved out of /etc/hotplug.d/iface:
  - 99-vpn-egress-manager
  - 99-vpnin-policy-route

Preserved:
- VM101 WAN eth0
- VM101 DNAT rules
- VM101 management eth2
- VM101 transit interfaces eth1/eth3
- VM100 wg_remote
- VM100 wg_paid
- VM121 direct wg-mgts admin access

Still present, intentionally not modified yet:
- vpn1 runtime interface
- legacy ip rules 10019/10020
- legacy table 200 behavior
- legacy HMN config files under /root/hmn
- legacy endpoint host routes through WAN

Safety point before this step:
- Proxmox snapshot: S029A_EGRESS_PRE_20260708-082358
- VM101 runtime backup:
  /root/router-ops-backups/20260708-082358-before-egress-rework.tar.gz
