Liveness probe

Minimal 200 OK if the process is up. No downstream checks.

GET is the documented public operation. HEAD is registered separately below so uptime monitors work without creating duplicate OpenAPI operation IDs for generated clients.