add Gitea Bot interface: webhook server, API tool, Caddy ingress

- Add src/gitea.rs: axum webhook server on :9800, handles @mention in
  issues and PRs, spawns claude -p for review, posts result as comment
- Add call_gitea_api tool: LLM can directly call Gitea REST API with
  pre-configured admin token (noc_bot identity)
- Add Caddy to Docker image as ingress layer (subdomain/path routing)
- Config: add gitea section with token_file support for auto-provisioned token
- Update suite.md: VPS-first deployment, SubAgent architecture, Caddy role

deploy/entrypoint.sh

@@ -3,16 +3,24 @@ set -euo pipefail
 
 GITEA_DATA="/data/gitea"
 NOC_DATA="/data/noc"
+CADDY_DATA="/data/caddy"
 GITEA_DB="$GITEA_DATA/gitea.db"
 GITEA_INI="$GITEA_DATA/app.ini"
 GITEA_TOKEN_FILE="$NOC_DATA/gitea-token"
+CADDYFILE="$CADDY_DATA/Caddyfile"
 
 GITEA_ADMIN_USER="${GITEA_ADMIN_USER:-noc}"
 GITEA_ADMIN_PASS="${GITEA_ADMIN_PASS:-noc-admin-changeme}"
 GITEA_ADMIN_EMAIL="${GITEA_ADMIN_EMAIL:-noc@localhost}"
 GITEA_HTTP_PORT="${GITEA_HTTP_PORT:-3000}"
 
-mkdir -p "$GITEA_DATA" "$NOC_DATA"
+mkdir -p "$GITEA_DATA" "$NOC_DATA" "$CADDY_DATA" /data/www
+
+# ── caddy config ───────────────────────────────────────────────────
+if [ ! -f "$CADDYFILE" ]; then
+    cp /opt/noc/Caddyfile "$CADDYFILE"
+    echo "[caddy] created $CADDYFILE"
+fi
 
 # ── gitea config ────────────────────────────────────────────────────
 if [ ! -f "$GITEA_INI" ]; then
@@ -39,6 +47,10 @@ EOF
     echo "[gitea] created $GITEA_INI"
 fi
 
+# ── start caddy ────────────────────────────────────────────────────
+echo "[suite] starting caddy..."
+caddy run --config "$CADDYFILE" --adapter caddyfile &
+
 # ── start gitea in background ──────────────────────────────────────
 echo "[suite] starting gitea..."
 gitea web --config "$GITEA_INI" --custom-path "$GITEA_DATA/custom" &