v1.0.3 — Fix healthcheck endpoint

The previous healthcheck target (/login) redirected on a fresh install before setup was complete, causing every new deployment to report unhealthy - a genuine bug, not cosmetic. Added a dedicated /health endpoint that always returns 200.