Structural basis of HIV-1 tethering to membranes by the Bst2-tetherin ectodomain