Document Traefik and CrowdSec upgrades for self-hosted deployments (#1030)

* Updating 3rd party packages

* Fixed possible unintentional crowdsec ban

* Fixes and version updates

* Document Traefik header handling

* Traefik rollback and crowdsec allowlist note (#1035)

* Warn that rolling Traefik back before v3.7.12 restores header-alias spoofing.

---------

Co-authored-by: PizzaLovingNerd <cameron@stillhq.io>

src/pages/selfhosted/selfhosted-quickstart.mdx

@@ -193,6 +193,8 @@ NetBird includes built-in local user management powered by an embedded <a href="
 
 Once your NetBird instance is running, refer to these guides for ongoing maintenance:
 
+Traefik and CrowdSec are updated separately from NetBird. See [Upgrading Traefik and CrowdSec](/selfhosted/maintenance/upgrade#upgrading-traefik-and-crowd-sec) for version selection, update steps, and verification, including the optional dashboard AppSec plugin.
+
 <Tiles
   id="maintenance"
   items={[
@@ -204,7 +206,7 @@ Once your NetBird instance is running, refer to these guides for ongoing mainten
     {
       href: '/selfhosted/maintenance/upgrade',
       name: 'Upgrade',
-      description: 'Upgrade your NetBird installation to the latest version.',
+      description: 'Upgrade NetBird, Traefik, and CrowdSec, and verify your deployment.',
     },
   ]}
 />