add VPS Traefik dynamic config — hubris.network fallback routes
All services use certResolver: letsencrypt (TLS-ALPN-01).
Patterns:
HTTP backends: blog, artifacto, trmnl, matrix, house, sso, media, paperless
HTTPS+SNI: mcp, oikos (via caddy-hubris serversTransport)
HTTPS+insecure: proxmox (via proxmox serversTransport)
Static config: --serverstransport.insecureskipverify=true
Config lives at /opt/traefik-dynamic.yaml on VPS.
Auto-deploy: webhook receiver on :8082 -> git pull + docker kill -s HUP netbird-traefik