svc-auth API — see /api/auth/* and /health