feat: harden identity and recovery operations

tests/Feature/HealthCheckTest.php

@@ -0,0 +1,15 @@
+<?php
+
+test('liveness endpoint is public and does not expose internals', function () {
+    $this->get(route('health.live'))
+        ->assertOk()
+        ->assertHeader('Cache-Control', 'no-store, private')
+        ->assertExactJson(['status' => 'ok']);
+});
+
+test('readiness endpoint checks the database and cache', function () {
+    $this->get(route('health.ready'))
+        ->assertOk()
+        ->assertJson(['status' => 'ready'])
+        ->assertJsonMissingPath('services');
+});