Read Runtime Status

Return the acting user's authorization state to their runtime.

Same answer as /status, on the other side of the auth split this router keeps: a kernel holds an internal principal and no cookie, so the session dependency /status uses rejects it. The skill catalog probes this to decide whether to tell the agent Snowflake is unconnected.