claude-hub · A1 alive

Phase A1 verification target — replace with app-backend in A3.

vps01-Caddy → WireGuard → infra01-NPM → pve02-VM