Sealing traffic between Go services with hpke –no mTLS, no secrets

Write your take first — we'll ask for email only when you're ready to publish.