Demo router for mix mpp.demo — serves a protected endpoint behind MPP.

Routes:

• GET / — welcome page with JSON instructions
• GET /resource — protected endpoint (402 without payment, 200 with valid credential)
• GET /health — unprotected healthcheck