Adds a Helm chart for coraza-caddy — Caddy server with the Coraza WAF plugin — following the same structure and conventions as the existing coraza-spoa chart.

Chart structure

• configmap.yaml — stores the Caddyfile; mounted at /etc/caddy/
• deployment.yaml — runs caddy run --config /etc/caddy/Caddyfile --adapter caddyfile
• service.yaml — exposes HTTP port (default 8080, named http)
• Standard supporting templates: serviceaccount, hpa, pdb, servicemonitor

Key design decisions vs. coraza-spoa

Default Caddyfile

Ships with OWASP CRS enabled out of the box:

{
    order coraza_waf first
}

:8080 {
    coraza_waf {
        load_owasp_crs
        directives `
            Include @coraza.conf-recommended
            Include @crs-setup.conf.example
            Include @owasp_crs/*.conf
            SecRuleEngine On
        `
    }
}

The port value (default 8080) controls the Kubernetes Service port and must be kept in sync with the listen address in the Caddyfile.

Tests

Nine Helm template unit tests cover deployment, service, configmap, and HPA rendering — consistent with the existing coraza-spoa_test.go pattern.