fix(infra): bind caddy to public eth0 IP only

Caddy was binding 0.0.0.0:443, which prevented tailscaled from claiming
100.87.53.10:443 for `tailscale serve --https=443`. Restricting Caddy to
the public eth0 IP (187.124.159.82) keeps the public api.bytelyst.com /
devops.bytelyst.com routing intact while freeing the Tailscale IP so the
tailnet-only dashboard URL (https://srv1491630.tailf85608.ts.net) is
reachable again.

Generated with [Devin](https://cli.devin.ai/docs)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

docker-compose.ecosystem.yml

@@ -270,8 +270,10 @@ services:
     image: caddy:2-alpine
     container_name: caddy
     ports:
-      - '80:80'
-      - '443:443'
+      # Bind to public eth0 IP only (not 0.0.0.0) so tailscaled can claim
+      # 100.87.53.10:443 for `tailscale serve` on the tailnet.
+      - '187.124.159.82:80:80'
+      - '187.124.159.82:443:443'
     volumes:
       - ../Caddyfile:/etc/caddy/Caddyfile:ro
       - caddy-data:/data