residua forge HTTP projection (ADR §10 P2 slice 3, R-a=CCX33).

Routes:
  /git/<repo>      git-http-backend (read-only smart-http)
  /api/healthz     forge api
  /api/changes
  /api/change/<q>
  /api/issues
  /api/review      (POST, ed25519-signed)
  /api/change      (POST, ed25519-signed)

Note: [forge_endpoint_no_tls] — HTTPS deferred until DNS decision.