observability-logging

# Observability Inspect current logging and monitoring conventions. Add structured, actionable logs with correlation IDs where appropriate, meaningful health/readiness checks, and metrics for key failure paths. Never log tokens, passwords, session cookies, sensitive personal data, or full private payloads. Avoid excessive high-cardinality metrics and noisy logs. Document what each signal indicates and how to use it during troubleshooting.