Make health checks quiet and explicit

The global error page keeps its document-level markup while its retry content is tested without invalid HTML nesting, and the intentional private-photo blob read is documented in the API guard.