SG public web-reader network check
Build: reader-check-20260923T2131Z
This verifies HTTPS ingress only, not an MCP call.