Authentication and API keys
Mint a key, send it, and understand what it can reach.
Base URL
/api. There is no version prefix.
Authentication
An HTTP Bearer token on theAuthorization header:
404,
not 403.
Starting a run
202 Accepted with a run id. Poll GET /api/runs/{id} until
the status is terminal, then read overallStatus for the verdict.
Ad-hoc runs take a projectId and a description instead of a
procedureId.

