Joins caddy to miccheck-qa-net so it can reverse-proxy to the
admin/api containers by name. Uses self-signed internal TLS since
miccheck-qa.com is a local-only hosts-file domain, not a real zone.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Books.wampler.us now routes through Caddy. Port 8083 no longer
exposed directly since traffic goes through the proxy network.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>