KES Residue Cleanup
Current KES Ownership Truth
- services/svc-kes is the only canonical KES HTTP/runtime host.
- the old colocated KES HTTP host in
svc-tendersis retired. - shared Kafka/projection/idempotency/DLQ/replay/auth/KYC/signature pieces still remain outside
svc-keson purpose.
This cleanup pass does not treat shared backbone code as if it had already moved into KES.