chore(security): set visibility to private, sanitize internal Tailscale IPs, and drop qa_evidence tracking

test(e2e): add Playwright browser automation test for Media Vault Albums