UCP Store Gateway

This host (ucp-gateway.diy-kiosk.store) is the gateway's admin/management plane, not a merchant storefront.

Per-merchant UCP discovery and traffic live on each merchant's own gateway subdomain (e.g. eshop-andyhoang.diy-kiosk.store/.well-known/ucp).

Admin and session-timeline routes here require an ADMIN_TOKEN bearer credential.