top-level apps/api. Outcome: needs its own instrumentation.ts + inbound extraction of the signed-header-adjacent trace context.

4c6483d4-a960-40ad-ae57-22b789a567c5