docs: host Caddyfile applied (git ACME + SSH :9200 verified)

Live /etc/caddy/Caddyfile matches configs/caddy mirror. Record
daylog, forgejo note, and close LOCAL-CHANGES-PENDING Caddy items.

2026/2026-07-10--forgejo-rootless.md

@@ -54,6 +54,8 @@ curl -sS https://git.hacktivism.ch/api/healthz
 
 ## Caddy (host root)
 
+Live `/etc/caddy/Caddyfile` matches `configs/caddy/Caddyfile` (applied 2026-07-10; `http://git.` in ACME list; SSH note **9200**).
+
 Site block live in `/etc/caddy/Caddyfile` (mirror under `configs/caddy/`).  
 Prefer including `http://git.hacktivism.ch` in the shared ACME/redirect host list.
 

2026/2026-07-10.md

@@ -13,3 +13,4 @@
   → topic: `2026-07-10--admin-log-origin-forgejo.md`
 - admin-log: castopod/prime compose mirrors; firewalld list-all +9200; Caddyfile.taler-host marked legacy
 - admin-log: Tor relay mirror documented (`configs/tor/`, host/tor)
+- Caddyfile applied on host: git. in ACME/redirect list, SSH note :9200; live matches configs/caddy mirror (verified)