Authentication

Use a scoped UnifiedMemory API key:

Authorization: Bearer <scoped key>

The key determines effective workspace, source app, agent binding, capabilities, and default agent scope. Non-admin callers cannot use request body fields to become another agent.