- Replace CorsLayer::allow_origin(Any) with configured cors_origins whitelist
- Add GET /health liveness probe (returns {"status":"ok"})
- Add GET /ready readiness probe (reports gRPC channel availability)
- Fix unused import warning in auth middleware tests
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>