Rethinking VPNs for Web3 Infrastructure: Lessons from Migrating to Zero Trust