Saphe Partner Portal API

Backend only. Use API routes, e.g.:

• GET /api/health
• GET /api/tenant-config (Host header → tenant)
• POST /api/auth/request-magic-link (body: { "email": "..." })
• GET /api/auth/session (current user from cookie)

After magic link: user is sent to /callback, then redirected here.