v0.116.1: ungate /debug + /api/debug from logging.level — the viewer must exist wherever the ring does

Live validation at logging.level=info 404'd the whole debug surface (the
motivating incident's blind spot). Auth unchanged (RequireAuth + CSRF).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

CLAUDE.md

@@ -87,6 +87,9 @@ Per-package helpers/seams/traps: **`REUSE.md`** (maintained same-commit as helpe
 - All UI text is Hungarian (Budapest timezone). Design tokens/gates: use the `felhom-ui-design`
   skill; templates must pass `controller/scripts/template_id_gate.py` + `emoji_gate.py`.
 - Testing doctrine (non-hollow tests, red-proofs, seams): use the `felhom-testing` skill.
+- **Logging**: new leveled lines use `internal/logx` (DEBUG always reaches the debug ring; stdout
+  respects `logging.level`); English, keys-never-values, durations on outcomes — full rules in
+  `felhom.eu/documentation/runbooks/logging-conventions.md`.
 - Update `REUSE.md` if you added/changed/deprecated a shared helper or pattern (same commit).
 - **Coupled features** (controller behavior that depends on a specific agent version): add a
   `featureProbes` table row in `internal/agentapi/features.go` + a `Supports` gate call at the