Health Checks
Health routes are public and do not requireAUTH_HEADER. /health/diagnostics is the one exception — it needs x-tenant-id, see below.
Liveness
Readiness
Diagnostics
Unlike/health and /health/ready, this route resolves a tenant and requires x-tenant-id — omitting it fails with TE_03: x-tenant-id not found in headers even though no AUTH_HEADER is needed. public is the only tenant the shipped config files define.