In this PR, we use a `tailscaledInit lazy.DeferredInit` to defer COM initialization and GP lock restriction
until the main function is called and determines that the current process is an actual tailscaled process,
rather than a CLI symlink, `tailscaled --version`, or another subcommand that doesn't require full initialization.
Updates #cleanup
Updates #14416
Signed-off-by: Nick Khyl <nickk@tailscale.com>