Caddy ingress was using emptyDir for /data storage, causing TLS
certificates to be lost on pod restarts or cluster recreations.
This led to Let's Encrypt rate limit issues from repeatedly
requesting new certificates.
Add a PersistentVolumeClaim for Caddy's data directory to persist
ACME certificates across redeployments.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>