Sync Caddyfile.snippet with live edge config

Edge (10.0.10.20) already uses the shared security-headers snippet and
a permanent (301) www redirect; the checked-in reference snippet had
drifted (302 redirect, no security headers, stale upstream IP).

deploy/Caddyfile.snippet

@@ -1,17 +1,12 @@
 # Replace the existing iliadobkin.com block in your Caddy VM's Caddyfile.
+# Live block (edge 10.0.10.20) as of 2026-07-08 uses the shared `security-headers`
+# snippet instead of a one-off header block, and a permanent (301) www redirect.
 
 iliadobkin.com {
-	reverse_proxy 10.0.10.124:8080
-
-	header {
-		X-Content-Type-Options    nosniff
-		X-Frame-Options           DENY
-		Referrer-Policy           strict-origin-when-cross-origin
-		Permissions-Policy        "geolocation=(), microphone=(), camera=()"
-		-Server
-	}
+	import security-headers
+	reverse_proxy 10.0.10.106:80
 }
 
 www.iliadobkin.com {
-	redir https://iliadobkin.com{uri}
+	redir https://iliadobkin.com{uri} permanent
 }