fix: use explicit HTTPS site blocks for each domain

Caddyfile

@@ -1,23 +1,16 @@
-:8080 {
+https://ask.xn--2dk.xyz {
-    handle /health {
+    handle / {
-        respond 200
-    }
-
-    # ask.xn--2dk.xyz - Natural language to SQL TUI
-    @ask_host {
-        host ask.xn--2dk.xyz
-    }
-    @ask_ws {
-        header Connection *Upgrade*
-        header Upgrade websocket
-    }
-    handle @ask_host {
         reverse_proxy localhost:7682 {
             flush_interval -1
         }
     }
+}
+
+https://db.xn--2dk.xyz {
+    handle /health {
+        respond 200
+    }
 
-    # db.xn--2dk.xyz - DuckDB SQL shell
     handle /login {
         reverse_proxy 127.0.0.1:8081
     }
@@ -46,5 +39,4 @@
             flush_interval -1
         }
     }
-
 }