Policy-based routing sends health-check probes into a blackhole next hop

Normal application flows look fine, but the service stays unhealthy because policy routing treats the health-check source differently and steers it to a dead path.