mini-heartbeat collector — POST /heartbeat (auth) | GET /relay/health (public)