Bounded execution: POST /execute (AF1 permit-gated SPEAK), POST /voice/stream (SSE); health: /healthz, /readyz.
POST /execute
POST /voice/stream
/healthz
/readyz
/healthz | /readyz