Add sectionName to HTTPRoute for HTTPS listener pinning and a separate HTTP→HTTPS 301 redirect route. Update resources from req=limit to request/limit separation for pay-as-you-go billing.