fix: prefixes

All endpoints (except /healthz which will only be used within the K8s cluster) should be available over /api/{ENDPOINT}.