PocketHook Review Server — up.

POST / with a Bearer token to exercise the PocketHook protocol.
GET /health returns `true`.

This server exists so Apple's App Review team can verify the iOS app's
end-to-end flow (message → server → optional Shortcut response).