Read Runtime Status

Return the acting user's authorization state to their runtime.

Same answer as /status, on the other side of the auth split this router keeps: a kernel holds an internal principal and no cookie, so the session dependency /status uses rejects it.