Cache auth.Client in OnInit (eliminates per-probe app.Auth call in HealthCheck).
Replace all fmt.Errorf with xerrors structured errors (ErrInvalidInput / ErrInternal).
Bump health/launcher/logz to v1.0.1, add xerrors v1.0.1, Go directive to 1.26.
API committed as stable.
