feat: add Caddy HTTPS reverse proxy and production compose override

Caddyfile

@@ -0,0 +1,3 @@
+{$DOMAIN:localhost} {
+    reverse_proxy app:8000
+}

docker-compose.prod.yml

@@ -0,0 +1,17 @@
+# Production override — uses pre-built GHCR image instead of local build.
+# Usage: docker compose -f docker-compose.yml -f docker-compose.prod.yml up -d
+services:
+  app:
+    image: ghcr.io/keboola/agnes-the-ai-analyst:latest
+  scheduler:
+    image: ghcr.io/keboola/agnes-the-ai-analyst:latest
+  extract:
+    image: ghcr.io/keboola/agnes-the-ai-analyst:latest
+  telegram-bot:
+    image: ghcr.io/keboola/agnes-the-ai-analyst:latest
+  ws-gateway:
+    image: ghcr.io/keboola/agnes-the-ai-analyst:latest
+  corporate-memory:
+    image: ghcr.io/keboola/agnes-the-ai-analyst:latest
+  session-collector:
+    image: ghcr.io/keboola/agnes-the-ai-analyst:latest

docker-compose.yml

@@ -104,5 +104,25 @@ services:
       - full
     restart: unless-stopped
 
+  caddy:
+    image: caddy:2-alpine
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile:ro
+      - caddy_data:/data
+      - caddy_config:/config
+    environment:
+      - DOMAIN=${DOMAIN:-localhost}
+    depends_on:
+      app:
+        condition: service_healthy
+    restart: unless-stopped
+    profiles:
+      - production
+
 volumes:
   data:
+  caddy_data:
+  caddy_config: