Make tailscale removal opt-in, since it depends on a key that expires and no-ops silently once it has

Partnership/partnership_offboard.sh

@@ -603,7 +603,7 @@ else
 fi
 
 # Tailscale removal — after state written so --check does not re-trigger offboard during grace sleep
-if [[ "${PARTNERSHIP_REMOVE_TAILSCALE:-true}" == true ]]; then
+if [[ "${PARTNERSHIP_REMOVE_TAILSCALE:-false}" == true ]]; then
     echo ""
     echo "━━━ $ICON_NET Tailscale Separation ━━━"
     # The grace period is recorded as a deadline, not slept through.
@@ -694,7 +694,7 @@ echo "  Step 9  — Keys revoked:   $(_revoke_status)"
 echo "  Step 10 — State:          $( [[ "$STEP_STATE_WRITE_OK" == true ]] && echo "INACTIVE ✅" || echo "⚠️  WRITE FAILED — still looks ACTIVE here" )"
 echo ""
 echo "  Blocklist: $MIRROR blocked — re-onboard to permit access again ✅"
-if [[ "${PARTNERSHIP_REMOVE_TAILSCALE:-true}" == true ]]; then
+if [[ "${PARTNERSHIP_REMOVE_TAILSCALE:-false}" == true ]]; then
     case "$TAILSCALE_REMOVED" in
         true)     echo "  Tailscale:   $MIRROR removed ✅" ;;
         deferred) echo "  Tailscale:   $MIRROR kept until the grace period expires — see ${STATE_DIR}/tailscale_removal_due.db" ;;