Reorganize the project around ipsec + wireguard

We should do some housekeeping on the `config` folder so that relevant files are easier to find. We may also want to rename the `vpn` role to `ipsec` or `strongswan` since it's clear we'll be supporting two VPNs now.