feat(caddy): add novelly.com routes, pin acme_ca to LE prod

Force prod ACME endpoint explicitly; renewal was silently hitting
staging, which blocked *.wampler.us cert renewal.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DPXhxhLUopnuDm3dWeHd5C

caddy/conf/Caddyfile

@@ -1,5 +1,6 @@
 {
   email james@wampler.us
+  acme_ca https://acme-v02.api.letsencrypt.org/directory
 }
 
 *.wampler.us {
@@ -96,3 +97,15 @@ api.miccheck-qa.com {
     encode gzip
     reverse_proxy api:8080
 }
+
+web.novelly.com {
+    tls internal
+    encode gzip
+    reverse_proxy novelly-web:80
+}
+
+api.novelly.com {
+    tls internal
+    encode gzip
+    reverse_proxy novelly-api:8080
+}