for static sites on a VPS it's fair to expect the host to provision these, yes?

No, not for a VPS. They are configured at the web server. If you mean CDN, you might be able to use a _headers file or similar to add. Cloudflare can definitely do it.

[dead]