This Worker is untrusted on purpose: own isolate, own custom domain, no hub bindings, framing denied, CORP/COOP set.
Probe: /api/probe
/api/probe
Hub must only link here — never execute this code inside a trusted context.