Hub backend – solo API: /api/health, /api/auth/session