Merge pull request 'SCRUM-45: Revert Caddy /webhooks/easypost carve-out' (#3) from scrum-45/revert-caddy-carveout into master

The EasyPost tracker webhook moved to debyltech-api (publicly reachable Lambda);
the fulfillr host is LAN-restricted and no longer hosts it, so the carve-out is
no longer needed. Removes the handle blocks for prod and dev.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

ansible/roles/podman/templates/caddy/Caddyfile.j2

@@ -344,15 +344,6 @@
 
 # Fulfillr - {{ fulfillr_server_name }} (Static + API with IP restrictions)
 {{ fulfillr_server_name }} {
-	# Public EasyPost tracker webhook — HMAC-verified inside go-fulfillr. Placed
-	# before the IP restriction (handle blocks are mutually exclusive, first
-	# match wins) so EasyPost's servers can POST here while everything else on
-	# this host stays IP-restricted.
-	@easypost_webhook path /webhooks/easypost
-	handle @easypost_webhook {
-		reverse_proxy localhost:9054
-	}
-
 {{ ip_restricted_site() }}
 
 	@api {
@@ -400,13 +391,6 @@
 
 # Fulfillr DEV/staging - {{ fulfillr_dev_server_name }} (Static + API with IP restrictions)
 {{ fulfillr_dev_server_name }} {
-	# Public EasyPost tracker webhook (test mode) — HMAC-verified inside
-	# go-fulfillr. Placed before the IP restriction so EasyPost can POST here.
-	@easypost_webhook path /webhooks/easypost
-	handle @easypost_webhook {
-		reverse_proxy localhost:9055
-	}
-
 {{ ip_restricted_site() }}
 
 	@api {