Dependency-aware deployment health and bounded admission draining.

Health output contains only component names and coarse states. It never serializes service handles, configuration, credentials, principals, or provider failures. Draining is atomic at the admission controller: queued calls are failed before this module waits for already-granted owners.