Production hardening: CSP, rate limit, env validation, health gating, Render blueprint, DEPLOYMENT.md

app/healthz/route.ts

@@ -0,0 +1,13 @@
+/**
+ * GET /healthz
+ *
+ * Lightweight health check for Render's load-balancer. Returns 200 OK
+ * without making any external calls. Use /api/health for the deeper
+ * Civi-side diagnostic.
+ */
+
+import { NextResponse } from "next/server";
+
+export async function GET() {
+  return NextResponse.json({ ok: true, service: "coop-checkin" }, { status: 200 });
+}