v2026.09.15.03 — 2026-09-15

• docs(whatsnew): note the mail-cert-on-every-port fix
• fix(mail): mail-host cert must serve on dovecot too — ACME challenge vhost + load order
• fix(mail): issue and install a cert for the server's mail hostname
• fix(mail): sender whitelist ignored domain entries → mail still scored as spam