stage1: caddy alive, awaiting OIDC metadata bootstrap