feat(infra): prestage broader app exposure hardening

apps/fc-messageboard/fc-messageboard.yaml

@@ -42,7 +42,7 @@ spec:
         app: messageboard-web
       annotations:
         fc.flowercore.io/healthz-anon: "true"
-        fc.flowercore.io/probe-path: "/health"
+        fc.flowercore.io/probe-path: "/healthz"
         prometheus.io/scrape: "true"
         prometheus.io/port: "8080"
         prometheus.io/path: "/metrics/prometheus"

apps/fc-ttsreader/fc-ttsreader.yaml

@@ -525,7 +525,7 @@ spec:
         app.kubernetes.io/part-of: flowercore
       annotations:
         fc.flowercore.io/healthz-anon: "true"
-        fc.flowercore.io/probe-path: "/health"
+        fc.flowercore.io/probe-path: "/healthz"
         prometheus.io/scrape: "true"
         prometheus.io/port: "5217"
         prometheus.io/path: "/metrics"

apps/fc-updater/fc-updater.yaml

@@ -54,7 +54,7 @@ spec:
     metadata:
       annotations:
         fc.flowercore.io/healthz-anon: "true"
-        fc.flowercore.io/probe-path: "/"
+        fc.flowercore.io/probe-path: "/healthz"
       labels:
         app: updatecenter-web
     spec:

apps/telephony/telephony.yaml

@@ -114,9 +114,9 @@ spec:
       app: telephony-web
   template:
     metadata:
-      annotations:
-        fc.flowercore.io/healthz-anon: "true"
-        fc.flowercore.io/probe-path: "/health"
+      annotations:
+        fc.flowercore.io/healthz-anon: "true"
+        fc.flowercore.io/probe-path: "/health"
       labels:
         app: telephony-web
     spec:
@@ -164,7 +164,7 @@ spec:
           ports:
             - containerPort: 5100
               name: http
-          # fc-safe-to-expose: X-Forwarded-Proto handled by AddFlowerCoreWebAuth (ADR-178) before any future public/OIDC flip.
+          # fc-safe-to-expose: X-Forwarded-Proto handled by AddFlowerCoreWebAuth (ADR-178) before any future public/OIDC flip.
           env:
             - name: Telephony__Twilio__AccountSid
               valueFrom:

tests/bluejay-infra-lint/FleetManifestLintTests.cs

@@ -87,10 +87,10 @@ public sealed class FleetManifestLintTests
             ["fc-devicemgmt"] = ("fc-devicemgmt-web", "/healthz"),
             ["fc-library"] = ("library-web", "/health"),
             ["fc-llm-bridge"] = ("fc-llm-bridge", "/healthz"),
-            ["fc-messageboard"] = ("messageboard-web", "/health"),
+            ["fc-messageboard"] = ("messageboard-web", "/healthz"),
             ["fc-retail"] = ("retail-web", "/healthz"),
-            ["fc-ttsreader"] = ("ttsreader-web", "/health"),
-            ["fc-updater"] = ("updatecenter-web", "/"),
+            ["fc-ttsreader"] = ("ttsreader-web", "/healthz"),
+            ["fc-updater"] = ("updatecenter-web", "/healthz"),
             ["knowledge"] = ("knowledge-web", "/healthz"),
             ["telephony"] = ("telephony-web", "/health"),
             ["worldbuilder"] = ("worldbuilder-web", "/healthz"),