Live call from the web app to GET /api/v1/health — proves end-to-end API + CORS wiring.