Debug endpoint to show all registered routes.

Security: This endpoint is only available in development/test environments. It is completely disabled in production and staging unless explicitly enabled.