Instead of the healthcheck API, perhaps we could use

SchemaService.ReadSchema

and expect

UNAUTHENTICATED    16

? Depends on whether SpiceDB reports that only when it's

SERVING

though