INTERACT Control Plane

Authoritative identity + entitlement service (P0). Apps consume /api/v1; they do not define entitlement themselves.

Health: /api/v1/health