/healthz only returns ok if the api container is serving and the redirect only happens if Caddy is, so asking the host over SSM confirmed what the two HTTP checks already had. It cost AWS credentials, tofu, and an `aws ssm send-command` that argparse in Python 3.14 refuses to build a parser for, which turned a working host into two FAIL lines. What remains needs no credentials and runs anywhere.