worker: handle KeyError in find_wireguard_domains

Sometimes we get a KeyError even though we realdy use get. As a last
resort we now return an empty list instead of having the thread stop
because of an Exception.

worker: listen only on localhost

worker: use replace instead of add in route handler

README: improve documentation

debian: minor fixes