*step-ca* now uses DCH CA R2, so the Caddy ACME configuration needs updated to trust that root certificate.