User Web (public, app login)
Synthetic app. Login issues an app session JWT from the User API; no Cloudflare Access here.
login
GET /v1/public/me
GET /v1/admin/users/u-1001 (should fail)
ready