Auth types
bearer, api-key, basic — canonical reference.
TODO: this is the single source of truth for auth types (Usage → Auth types links here). Full table with HTTP header, curl equivalent, and a concrete example manifest per type. Cover
auth.env,auth.type,auth.header(api-key), and howbasicexpects the env var to already be base64-encoded.