Add a note in "Security" section of documentation that actuator is not a required dependency. If platform needs health checks or the like, make sure to include actuator and setup the security so /actuator/** does not have access to /{application}/{label}