Answer
Disable the Default Document setting for that site in IIS, along with Directory Browsing — once both are disabled, browsing to the site's root returns a 403 Forbidden instead of the generic IIS default page, which achieves the goal (not exposing the underlying server details) without needing an actual redirect rule, and without affecting the rest of the applications hosted on that same site.