Fixing Nginx Redirect Loop Configuration Issues - How to Fix NET::ERR_CERT_AUTHORITY_INVALID from Chrome Policy-Cloudflare Wildcard Record: Setup and Troubleshooting

Final checklist
- Confirm that the same symptom is gone after a restart or refresh.
- Keep the smallest working change and undo temporary diagnostic settings.