snowflake-01: Connect the other NIC and move wireguard and sshd to it

This will allow for

• skipping conntracking on the 10G NIC
• ethtool tuning of the 10G NIC without risking losing the host