Function app 

pub(super) fn app(state: RuntimeState, listener_address: SocketAddr) -> Router

Composes public liveness, authenticated HTTP families and WebSocket upgrades.

Operator authorization uses the actual listener address. WebSocket authentication runs after the upgrade. Control request tracking wraps authorization and input extraction so rejected requests remain counted.