## 1. Fix SS variable references in Surge template

- [x] 1.1 Change `ss_port`, `ss_cipher`, `ss_password` to use `hostvars[groups['relay'][0]]` in `templates/surge-client.conf.j2`