Server Manager
Creates the Cloudflare record, Caddy route with automatic TLS, and a PM2 app slot.
A database + role with a generated password, stored encrypted.