Shell probe signs a JWT from /jwtsecret and calls engine_exchangeCapabilities on :8551 so compose can gate Maru startup on EL engine readiness.