// Package httputil holds small, dependency-free HTTP helpers shared across apps:
// CORS middleware, JSON response helpers, and user-agent parsing. Anything that
// needs the application's auth/session/permission model lives app-side (in
// internal/httpauth), not here, so this package never imports app code.
package httputil