Summary
Add a header helper for exposing response timing on public endpoints.
Acceptance Criteria
- helper sets a response timing header consistently
- does not leak sensitive internals
- can be enabled/disabled via config
Contributor coordination: https://t.me/accesslayerorg