Liveness/readiness probes. Readiness flips to 503 once shutdown begins so load balancers drain this instance before in-flight requests finish.