SAML → Shopify bridge. Endpoints: /helloworld, /healthz, /login, /sso/acs (POST), /metadata