Add sanitized compose for caddy-vm and automation-vm stacks

Caddy (+ a truncated/sanitized example Caddyfile showing the mTLS +
Authentik forward-auth pattern without the real subdomain list),
Hawser, Gitea (private instance only, dropped the public-mirror
service - that's already its own public thing), Kestra (genericized
the ansible-repo/SSH-key bind mounts), Mosquitto, n8n, NetBox,
Node-RED.

Docker/Caddy/docker-compose.yaml

@@ -0,0 +1,18 @@
+services:
+  caddy:
+    image: caddy:latest
+    container_name: caddy
+    restart: always
+    ports:
+      - "${HTTPS_PORT}:443"
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile
+      - /path/to/caddy/caddy_data:/data
+      - /path/to/caddy/caddy_config:/config
+      - /etc/caddy/certs:/etc/caddy/certs
+    networks:
+      - caddy-net
+
+networks:
+  caddy-net:
+    external: true