Summary #
Enforce WriteTimeout (server.config.SSEWriteTimeout) on http.Server in Server.ListenAndServe (F-06) so zero-window / stalled TCP clients on non-SSE endpoints (GET /health, 401, 404, 400, 409, 429) time out instead of pinning sockets and handler goroutines indefinitely.
Streaming SSE responses (POST /import) continue refreshing per-write deadlines via http.ResponseController.SetWriteDeadline on header flush, heartbeats, and events so healthy streams exceeding WriteTimeout complete unaffected.
Verification #
gofmt -l internal/server/server.go internal/server/server_test.gogo vet ./...go test -race -count=1 ./...