templates: apply the tvOS setup reorder to the served /apple page

The instructions are duplicated between the docs and the HTML page
headscale serves at /apple. Reorder the tvOS steps there to match, so
the VPN configuration is installed before the alternate coordination
server URL is set.

hscontrol/templates/apple.go

@@ -146,6 +146,22 @@ func Apple(url string) *elem.Element {
 				elem.Text("Install the official Tailscale tvOS client from the "),
 				externalLink("https://apps.apple.com/app/tailscale/id1470499037", "App Store"),
 			),
+			elem.Li(
+				nil,
+				elem.Text("Open "),
+				elem.Strong(nil, elem.Text("Tailscale")),
+			),
+			elem.Li(
+				nil,
+				elem.Text("Select "),
+				elem.Strong(nil, elem.Text("Install VPN configuration")),
+			),
+			elem.Li(
+				nil,
+				elem.Text("Select "),
+				elem.Strong(nil, elem.Text("Allow")),
+				elem.Text(", but don't sign in yet"),
+			),
 			elem.Li(
 				nil,
 				elem.Text("Open "),
@@ -166,23 +182,9 @@ func Apple(url string) *elem.Element {
 				nil,
 				elem.Text("Return to the tvOS "),
 				elem.Strong(nil, elem.Text("Home")),
-				elem.Text(" screen"),
-			),
-			elem.Li(
-				nil,
-				elem.Text("Open "),
+				elem.Text(" screen and open "),
 				elem.Strong(nil, elem.Text("Tailscale")),
 			),
-			elem.Li(
-				nil,
-				elem.Text("Select "),
-				elem.Strong(nil, elem.Text("Install VPN configuration")),
-			),
-			elem.Li(
-				nil,
-				elem.Text("Select "),
-				elem.Strong(nil, elem.Text("Allow")),
-			),
 			elem.Li(
 				nil,
 				elem.Text("Scan the QR code and follow the login procedure"),