Add /versionz diagnostic endpoint
Serves the running binary's commit, build date, and Go version as plain
text with no-store caching, so an operator can confirm what production
is running without host access. The identity flows from the cmd
package's ldflags-stamped variables into httpserver at init time,
leaving cmd/serve.go and production.go untouched so the endpoint can
ride an ordinary application release.
