ClusterIP SOCKS5 proxy on 9050 for pod outbound via Tor, plus hidden
service for monerod (P2P 18080 + restricted RPC 18089). PVC holds
/var/lib/tor so the onion hostname persists across restarts.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
