- Add Routes model to services UI (paths, headers, IP whitelisting per route)
- Show TLS cert info per service with inline provision/renew actions
- Remove TLS Certificates section from dashboard (now on services page)
- Make gateway router port list dynamic from config + VPN state
- Add TODO for header validation in HAProxy config generation
Document the project overview, architecture, development commands,
environment variables, and the service registration API contract.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>