Expose /api/whoami through host meta