One operational view for sb-platform, starter-kit projects, external services, and public checks.

The watcher receives local runtime health reports, discovers unknown sources safely, performs outside-in DNS/TLS/HTTP checks itself, and groups everything by stable organization, project, instance, and source identifiers.