node001: tunnel foto.scoutingmbg.nl to the home cluster

The group's DNS now points foto.scoutingmbg.nl at rubenhensen.nl, which is
this server, instead of mbg.hensen.io (the home IP). Resolvers that had
picked up the change got node001's own certificate and no immich. Add the
host to the SNI passthrough and the port 80 proxy like the other tunneled
hosts, so it works through either record.

nix-infra-machine/nodes/node001.nix

@@ -19,6 +19,8 @@ let
     "serpbear.rubenhensen.nl"
     "git.rubenhensen.nl"
     "vic.rubenhensen.nl"
+    # The group's DNS points foto at rubenhensen.nl, i.e. here
+    "foto.scoutingmbg.nl"
   ];
 
   sniMapEntries =