hivemind canary — Caddy reverse-proxy front-end. Site-fleet-mgr writes per-site routes via admin API.