Documents the missing lk-jwt-service, well-known URL fix, bare domain routing, DNS apex records, and IPv6 cert-manager self-check failure. Includes dual-stack K3s migration plan.
