deploy: align Traefik TLS paths with gw-03 ssl/ convention

deploy/traefik/apess.yml

@@ -1,6 +1,9 @@
+# APESS 2026 — Cloudflare Origin Certificate (*.redclaw.dev)
+# Drop this file into the live Traefik dynamic dir on gw-03:
+#   /home/redclaw/projects/clawbooks/deploy/traefik/dynamic/apess.yml
+# Cert files must live alongside the existing gw03/ + origin/ certs at:
+#   /home/redclaw/projects/clawbooks/deploy/traefik/ssl/apess/apess.{pem,key}
 tls:
   certificates:
-    - certFile: /etc/ssl/redclaw/apess.pem
+    - certFile: /etc/traefik/ssl/apess/apess.pem
-      keyFile: /etc/ssl/redclaw/apess.key
+      keyFile: /etc/traefik/ssl/apess/apess.key
-      stores:
-        - default