If you prefer a small Node server, implement POST /api/roast and reverse-proxy behind your web server.
This is a skeleton only; do not ship without auth/rate limiting.
