wiki.axion1337.chat (public, Let's-Encrypt TLS, native Authentik-OIDC login, no forward-auth) added to #0048 (ingress/cert pattern) and #0049 (redirect URI, same URL for user and admin, role decides). Kept out of ADR-0014 deliberately: accepted ADRs are not edited, and the hostname is a deployment detail, not a new decision.