Runtime Proof

• GET /health is public and returns ok=true.
• /v1/info reports route registry status closed with 159 advertised and router-exposed routes when called with x-api-key.
• /v1/runtime/release-proof is authenticated and reports deterministic runtime, replay equivalence, fail-closed auth, and public surface pass.
• /v1/runtime/tenant-billing-proof is authenticated and reports tenant-safe redaction plus billing, quota, pricing, and proof-bundle fields.