Returns 200 { status: 'ok' } for container healthchecks and monitoring. Placed before all /api/* routes so it bypasses auth; intentionally static with no DB dependency so the container reports healthy whenever the process is serving.