MVP: serviceize health, readiness, state, events, metrics, and repair planning endpoints

[mdheller]

Purpose

Define and implement the local-only service boundary for sourceos-syncd after persistence and model contracts exist.

Canonical architecture: SourceOS-Linux/sourceos-spec/docs/architecture/sourceos-state-integrity-layer.md
Program tracker: SourceOS-Linux/sourceos-spec#83

Intended local endpoints

• /healthz liveness
• /readyz readiness
• /statez structured State Integrity Report
• /events canonical event stream
• /events/{id} event evidence reference
• /events/{id}/explain operator narrative
• /metrics Prometheus/OpenTelemetry export
• /repairz repair planning endpoint; local-only and policy-gated

Requirements

• Local-only by default.
• No remote repair endpoint unless policy explicitly permits it.
• Readiness must distinguish healthy, degraded, unsafe, and uninitialized local state.
• /statez must be compatible with current State Integrity Report contract.
• Service layer must not replace CLI; CLI remains the stable operator path.

Acceptance criteria

• Service boundary is documented before implementation.
• Endpoints have JSON response examples.
• Readiness and liveness semantics are tested.
• Repair planning endpoint is preview-only until apply policy is designed.

[mdheller]

Status (2026-07-18): The service boundary is partially implemented — PR #36 (feat/sync-daemon) adds the daemon and a check-health endpoint, and PRs #38/#39 add the sync status CLI. The full endpoint suite (/healthz, /readyz, /statez, /events, /events/{id}/explain, /metrics, /repairz) has not shipped as a documented, tested service layer. Service boundary design and full endpoint implementation remain open.

[mdheller]

All 6 endpoints already present in service.py before this PR: /healthz, /readyz (503 when uninitialized or unsafe), /statez, /events + /events/{id}/explain, /metrics (Prometheus text), /repairz. PR #51 adds 4 more read endpoints (/noisez, /narrativez, /coherencez, /authorityz). Confirmed 118 tests pass.