The public edge's nginx is up (HTTP base). Per-domain vhosts + TLS come
with certbot --nginx.
Seeing this page means the path into the gateway works — the forwarded
request reached nginx on :80 and was served from
/var/www/webgateway.
Liveness check: /healthz.