Authentication + workspace selection

This file is now a short pointer.

For the current implementation-backed docs, use:

• docs/api.md

That document covers:

• session auth
• personal API keys
• hosted MCP keys
• global API token behavior
• workspace header/query selection
• role and permission behavior
• auth/profile/invite/password-reset routes

Reason for this redirect:

• the older version of this file had drifted from the actual implementation in apps/api/src/index.ts
• docs/api.md is now the canonical API/auth reference