Security position

v1 has no real authentication. Admin is an unguessable route prefix plus x-admin-prefix. Tool endpoints use a shared secret header. There is no multi-tenant isolation.

TODO: threat model and authn/authz before any real CRM credentials are introduced.