Get System Health

Single endpoint backing the CRM Settings → System Health tab.

Gateway already enforces view_system_health; we keep the get_caller dependency so the route shows up in OpenAPI as authenticated.