=== 8080 internal API fingerprint — evidence (alwaysdata infra, auth-gated) ===
GET  /       => HTTP/1.0 404 Not Found   (headers: Access-Control-Allow-Headers: Content-Type, X-API-Key)
GET  /x      => HTTP/1.0 404 Not Found
POST /       => HTTP/1.0 401 Unauthorized {"error":"Unauthorized."}
OPTIONS /    => HTTP/1.0 200 OK
CORS: Access-Control-Allow-Methods: POST, GET, OPTIONS; Access-Control-Allow-Origin: *
=> alwaysdata internal API reachable from tenant loopback; X-API-Key auth-gated; no unauth endpoints found.