Public HTTPS to a persistently-running T3 Code server on this box.
internet -> Cloudflare -> Caddy (:80/:443, OS service)
-> 127.0.0.1:3773 -> t3code.service (systemd) -> t3 + provider CLIs
LLM access is via OpenRouter (keys in /root/.spawnrc).