Backend Sandbox Service Route Smoke V1

Verifies the running backend service exposes dry-run/mock-only sandbox routes and includes an old app pointer audit. No production execution, mutation, audit write, send, payment, filing, credential, or promotion capability is created.