Caddy 2: wildcard + on demand certificates

[jmstfv (Jama)]

For future visitors: API permissions you need to give (from your Cloudflare dashboard) so that Caddy could request a wildcard certificate