The page now lists every running copy of the application and refreshes every
2 seconds. Each refresh goes through the Ingress, which picks a pod: that pod
is highlighted ("you are here"), with how many of your requests each pod
served.

A pod finds the others through DNS (headless Service demo-app-peers) and asks
each one /api/self directly. No Kubernetes API, still no service account
token; the NetworkPolicy opens only DNS and the other demo-app pods on 8080.
Peer answers are type-checked and cached one second.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>