Spring Boot 4 Actuator in production: endpoints, security, custom health indicators

Companion repository for the ankurm.com article. Every transcript in docs/output/
was produced by running this project; scripts/run-all.sh regenerates all of them.

Verified against Spring Boot 4.1.1 / Framework 7.0.9 / Security 7.1.1 /
Micrometer 1.17.1 / kafka-clients 4.2.1 on Temurin JDK 25.0.4.1+1.

scripts/demo-endpoint-catalogue.sh

@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+# The authoritative endpoint list: what the RUNNING application publishes with exposure = "*".
+set -uo pipefail
+cd "$(dirname "$0")/.."
+OUT=docs/output/02-endpoint-catalogue.txt
+{
+  echo "### Every web-exposed endpoint, read from the running application"
+  echo "### profiles: exposeall,open      management.endpoints.web.exposure.include: \"*\""
+  echo
+  echo "\$ curl -s http://localhost:8080/actuator/diag"
+  curl -s http://localhost:8080/actuator/diag | python3 -m json.tool
+} > "$OUT" 2>&1
+echo "wrote $OUT"