5. Caching

Cache-Control: private, max-age=30

Uniform on every endpoint. Private = browser/client cache only, no CDN. ETag not supported in V1 (additive, comes later).

---