brainforge-internal-overhead-sync

GET /health
GET|POST /run — header x-cron-secret (min 16)
GET|POST /diag/snowflake — JWT auth probe (SELECT 1); header x-cron-secret