caddyfile: reset wildcard client auth for exact hosts

[VatsalGoel3]

Assistance Disclosure

AI/LLM assistance was used via OpenAI Codex to help draft the adapter change, fixture, and test workflow. I reviewed the diff, understand the code being submitted, and verified it with the tests listed above.

Summary

• Add a Caddyfile adapter fixture for wildcard TLS client auth shadowing an exact hostname.
• Emit an exact-host SNI TLS connection policy before matching wildcard client-auth policies.
• Preserve wildcard client authentication while letting explicitly configured exact hosts use default TLS behavior.

Tests

• go test ./caddytest/integration -run 'TestCaddyfileAdaptToJSON/tls_wildcard_exact_host_resets_client_auth'
• go test ./caddyconfig/httpcaddyfile ./caddytest/integration
• go test -race -short ./caddyconfig/httpcaddyfile ./caddytest/integration

Assistance Disclosure

OpenAI Codex generated the initial fixture and adapter implementation. I submitted the initial diff before reviewing it thoroughly. I have since reviewed every changed line, verified the behavior, and rerun the listed tests.

[francislavoie]

I reviewed the diff

lmao, I don't think you did.

[VatsalGoel3]

My bad lol, have corrected

[francislavoie]

https://github.com/caddyserver/caddy/blob/master/AGENTS.md#ai-contribution-rules

Also you have two assistance disclosures. lol.

It's not clear what this issue is in reference to. Is there an issue or thread this addresses?