Milo backend

API only — the UI was stripped for a fresh rebuild. See /api/* routes and /api/health.