Add UFW firewall rules with port 22 for gitea SSH tunnel

Added firewall configuration to both setup scripts. New ports:
- 22/tcp (xray tunnel: gitea SSH)
- 10022/tcp (xray bridge: Reality VLESS for gitea SSH)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

server-setup/cloud-init/cloud-init.yml

@@ -166,4 +166,15 @@ runcmd:
   - chown -R eberkheev:eberkheev /home/eberkheev/3x-ui
   - chown -R eberkheev:eberkheev /home/eberkheev/cert
   - chown eberkheev:eberkheev /home/eberkheev/update.sh
+  - ufw default deny incoming
+  - ufw default allow outgoing
+  - ufw allow 22/tcp
+  - ufw allow 80/tcp
+  - ufw allow 443/tcp
+  - ufw allow 10001/tcp
+  - ufw allow 10003/tcp
+  - ufw allow 10022/tcp
+  - ufw allow 10080/tcp
+  - ufw allow 10443/tcp
+  - ufw --force enable
   - docker pull ghcr.io/mhsanaei/3x-ui:latest