HTTP/3 on FreeBSD: Getting QUIC Working with nginx in a Bastille Jail

What looked like a simple nginx config change turned into a tour through SSL library incompatibilities, pf firewall rules for a new protocol, and a multi-worker affinity problem that only shows up under real traffic. A complete guide to getting HTTP /3 working with nginx 1.28 on FreeBSD 15.0 inside a Bastille jail.