Runtime health

Ops surfaces should use honest states:

• healthy
• degraded
• failing
• no_traffic
• insufficient_data

No-traffic or missing proof is not healthy. It is an explicit state.