Maintains NordLynx WireGuard egress on OPNsense, selects servers from NordVPN recommendations, and applies the configured failure policy.