caddytls: Consolidate empty APs more smartly

[mholt]

This cleans up automation policy conslidation in some cases

Should fix #7559.

Assistance Disclosure

No AI was used.

[mholt]

@filiabel How would you feel about trying this out

[filiabel]

@mholt Seems to be working with the little cert-server runtime test 👍

=== Starting cert-server ===
=== Building caddy via xcaddy from branch fix-ap-consolidation ===
=== Running caddy (fix-ap-consolidation)  ===
  wiki.example.com  → 200
  other.example.com → 200
  cert-server was called for:
    wiki.example.com
    other.example.com
  caddy tls handshake log:
    wiki.example.com → using externally-managed certificate
    other.example.com → using externally-managed certificate

[mholt]

Great! Thank you for verifying!