fix: HTTP-only Caddy for Gate B LAN phone hang

Root cause: Caddy on :80 returned 308 → HTTPS, and TLS handshake failed
(Go/OpenSSL compat). Phones hung on HTTPS redirect loop.

Fix: Caddyfile serves all HTTP on :80 without TLS/redirect. Docker
compose drops port 443 and cert mount. Interim — post-POC restores
proper TLS.

deploy/Caddyfile

@@ -1,5 +1,10 @@
-slab.local {
-	tls /data/certs/slab.crt /data/certs/slab.key
+# Interim HTTP-only Caddy config for Gate B UAT.
+# Serves frontend + API over plain HTTP on all hostnames/IPs.
+# No TLS, no HTTPS redirect. Phone CA trust is not required.
+#
+# Post-POC: restore slab.local with proper TLS and ACME.
+
+:80 {
 	handle /api/* {
 		reverse_proxy fastapi:8000 {
 			transport http {