Prometheus, Loki, and Tempo external endpoints were publicly accessible with no authentication. Add auth_request to all three routes using Hydra's userinfo endpoint (same pattern as admin APIs).
Prometheus, Loki, and Tempo external endpoints were publicly accessible with no authentication. Add auth_request to all three routes using Hydra's userinfo endpoint (same pattern as admin APIs).