- Install base dependencies and aws-cli for S3 downloads
- Create caddy and bot system users with dedicated homes
- Configure web root with SGID and POSIX ACL inheritance
- Generate Caddyfile config and a sample index page
- Enable and start Caddy via systemd