bf-cloud: Caddy live, TLS issued via HTTP-01. Stack validation OK.