Internal Audito backend API. Health and status are public: /health, /api/status. All other routes require a bearer token.
/health
/api/status