Self-hosted WAF without Docker — Caddy + Coraza + CRS in one binary

If you already reverse-proxy with Caddy (or you’re tired of ModSecurity glue), there’s a boring...