feat(caddy): bypass Authentik forward_auth for Plane API key requests

Adds a named matcher @plane_api that matches /api/* requests carrying
X-API-Key, routing them directly to plane_api:8000 without hitting the
Authentik outpost. Browser/UI sessions still go through forward_auth.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Caddyfile

@@ -418,6 +418,13 @@ docs.ginnoir.com {
 plane.ginnoir.com {
 	route {
 		import authentik_outpost
+		@plane_api {
+			path /api/*
+			header X-API-Key *
+		}
+		handle @plane_api {
+			reverse_proxy plane_api:8000
+		}
 		handle /api/* {
 			import authentik_forward_auth
 			reverse_proxy plane_api:8000