rag placeholder — deployed via GitHub Actions OIDC. See /api/health/deep for details.