Replaces TCP app:9000 with a shared Unix socket volume, adds domain with automatic Let's Encrypt TLS, and exposes ports 80/443 on Caddy. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>