✓ TLS OK — nginx is serving on port 8443
ORDS is not yet configured — /ords will return 502 until BL-027 runs.
Health endpoint: /health