Authentication
All endpoints require a Bearer token plus tenant context headers:Authorization: Bearer <token>— required on every requestX-Tenant-ID— required. UUID of the current tenant.X-Branch-ID— required for item operations. UUID of the current branch.X-Correlation-ID— optional. Request correlation ID for tracing.