- accessLog: field filtering to drop sensitive headers (Authorization) while keeping useful ones (User-Agent, Content-Type, Referer) - metrics: Prometheus endpoint with latency buckets (0.1, 0.3, 1.2, 5.0s) Aligned with core's observability config. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>