Connect Caddy to the singi-labs/monitoring stack via a shared Docker network so it can reverse-proxy Grafana at monitor.barazo.forum. - Add docker-compose.monitoring-proxy.yml (optional overlay) - Add Grafana subdomain block to Caddyfile (inert without GRAFANA_DOMAIN) - Add GRAFANA_DOMAIN to .env.example - Update deploy-staging.yml COMPOSE_FILES to include proxy overlay - Document monitoring in administration.md, security-hardening.md, staging.md - Document cAdvisor Docker socket exception in security-hardening.md