Confirms the gateway process is up and serving HTTP. If an X-API-Key header is supplied, also reports whether the key is currently authorized via the access field. The endpoint always returns 200 — invalid or missing keys are reflected as access: false rather than an error.