feat(caddy): expose miccheck-qa admin/api on local domains

Joins caddy to miccheck-qa-net so it can reverse-proxy to the
admin/api containers by name. Uses self-signed internal TLS since
miccheck-qa.com is a local-only hosts-file domain, not a real zone.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

caddy/conf/Caddyfile

@@ -84,3 +84,15 @@
 localhost {
     respond "Hello, world!"
 }
+
+admin.miccheck-qa.com {
+    tls internal
+    encode gzip
+    reverse_proxy admin:80
+}
+
+api.miccheck-qa.com {
+    tls internal
+    encode gzip
+    reverse_proxy api:8080
+}