Alternatively, can they run over a tailscale subnet router?

Yes, the cameras wouldn’t need to be aware of tailscale (or a VPN), you’d just put a pi or install tailscale on a PC there and expose the cameras over the subnet router config to your server also on tailscale.