API foundation template refreshes authorization and observability defaults

The serverless API foundation template has been refreshed with clearer authorization boundaries, structured logging, and operating notes for common HTTP failure paths.

The template remains free and deploys from your own repository. The update is intentionally a starting point rather than a universal policy: teams should review the IAM roles, request validation, retention settings, and alarms before using it in a production workload.