feat(caddy): add novelly.com routes, pin acme_ca to LE prod

Force prod ACME endpoint explicitly; renewal was silently hitting
staging, which blocked *.wampler.us cert renewal.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DPXhxhLUopnuDm3dWeHd5C

caddy/compose.yml

@@ -35,6 +35,7 @@ services:
     networks:
       - proxy
       - miccheck-qa-net
+      - novelly-net
 
 networks:
   proxy:
@@ -43,3 +44,6 @@ networks:
   miccheck-qa-net:
     name: miccheck-qa-net
     external: true
+  novelly-net:
+    name: novelly-net
+    external: true

caddy/conf/Caddyfile

@@ -1,5 +1,6 @@
 {
   email james@wampler.us
+  acme_ca https://acme-v02.api.letsencrypt.org/directory
 }
 
 *.wampler.us {
@@ -96,3 +97,15 @@ api.miccheck-qa.com {
     encode gzip
     reverse_proxy api:8080
 }
+
+web.novelly.com {
+    tls internal
+    encode gzip
+    reverse_proxy novelly-web:80
+}
+
+api.novelly.com {
+    tls internal
+    encode gzip
+    reverse_proxy novelly-api:8080
+}