[Docs] Document Cloudflare Tunnel deployments

[roomote-roomote]

Opened on behalf of Matt Rubens. Follow up by mentioning @roomote-roomote, in the web UI, or in Slack.

What changed

Documented the supported Cloudflare Tunnel deployment path for self-hosted Roomote, including the required originRequest.noTLSVerify: true setting for the private HTTPS hop to Caddy when Caddy uses its internal certificate.

Why this change was made

Without an origin trust setting, cloudflared rejects Caddy's locally issued certificate. The guidance now makes that requirement explicit while keeping Cloudflare's browser-facing TLS verification intact.

Impact

No product behavior changes. Self-host operators have a complete, verified configuration guide for Cloudflare Tunnel deployments.

[roomote-roomote]

No code issues found. See task

• SELF_HOSTING.md:100-110 Documented the Cloudflare Tunnel HTTPS-origin trust requirement for Caddy's internal certificate, including originRequest.noTLSVerify: true and its private-hop scope.

_{Reviewed d418257}

[roomote-roomote]

Implemented in d418257. SELF_HOSTING.md now explains that cloudflared must either trust Caddy's local CA or use originRequest.noTLSVerify: true for the private tunnel-to-Caddy HTTPS hop, while Cloudflare continues serving a publicly trusted certificate to browsers.

[roomote-roomote]

Superseded by #803, which consolidates this Cloudflare Tunnel guidance with the flat preview hostname implementation and deployment documentation.