Standardize response shapes and fix dead fetchT timeout keys

Three small cleanups for v1.14.0:

1. /caddy/cas now uses standard success envelope
   Was: { status: 'success', data: { cas: caList } }
   Now: { success: true, cas: caList }
   Updated frontend service-infrastructure.js to match.

2. /api/health/ca now uses standard envelope + meaningful HTTP codes
   Was: { status, message, daysUntilExpiration } with 200 on every error
   Now: { success, caStatus, message|error, daysUntilExpiration }
        with 200 / 404 / 500 as appropriate
   caStatus field preserves the original 'healthy'/'warning'/'critical'/'error'
   semantic so any future consumer of the CA-health state still has it.
   Tests updated to match.

3. Dead timeout: keys in fetchT opts are now a warning, not a silent strip
   src/utils/http.js:41 used to do  without telling
   anyone. Callers that wrote fetchT(url, { timeout: 5000 }) got the default
   5s timeout with no indication that their explicit value was ignored.
   Now it logs a warning naming the call site, then strips the key.
   Fixed 4 call sites that had stale timeout: keys:
   - src/context/caddy.js
   - src/context/dns.js
   - src/context/provider-dns.js
   - routes/dns.js (2 places)

dashcaddy-api/routes/health.js

@@ -273,9 +273,10 @@ module.exports = function({
     try {
       // Check if certificate exists
       if (!await exists(rootCertPath)) {
-        return res.json({
-          status: 'error',
-          message: 'Root CA certificate not found',
+        return res.status(404).json({
+          success: false,
+          error: 'Root CA certificate not found',
+          caStatus: 'error',
           daysUntilExpiration: null
         });
       }
@@ -286,34 +287,36 @@ module.exports = function({
       const daysUntilExpiration = Math.floor((expirationDate - new Date()) / (1000 * 60 * 60 * 24));
 
       // Alert thresholds
-      let status = 'healthy';
+      let caStatus = 'healthy';
       let message = `CA certificate valid for ${daysUntilExpiration} days`;
 
       if (daysUntilExpiration < 0) {
-        status = 'critical';
+        caStatus = 'critical';
         message = `CA certificate EXPIRED ${Math.abs(daysUntilExpiration)} days ago!`;
       } else if (daysUntilExpiration < 7) {
-        status = 'critical';
+        caStatus = 'critical';
         message = `CA certificate expires in ${daysUntilExpiration} days!`;
       } else if (daysUntilExpiration < 30) {
-        status = 'critical';
+        caStatus = 'critical';
         message = `CA certificate expires in ${daysUntilExpiration} days!`;
       } else if (daysUntilExpiration < 90) {
-        status = 'warning';
+        caStatus = 'warning';
         message = `CA certificate expires in ${daysUntilExpiration} days`;
       }
 
       res.json({
-        status: status,
-        message: message,
-        daysUntilExpiration: daysUntilExpiration,
+        success: true,
+        caStatus,
+        message,
+        daysUntilExpiration,
         expiresAt: notAfter
       });
     } catch (error) {
       await logError('GET /api/health/ca', error);
-      res.json({
-        status: 'error',
-        message: error.message,
+      res.status(500).json({
+        success: false,
+        error: error.message,
+        caStatus: 'error',
         daysUntilExpiration: null
       });
     }