Authenticated Endpoints (admin, engineer, or operator)

All endpoints below require authentication — either a valid osprey_access cookie or a valid X-API-Key header. If authentication fails, the server responds with 401 Unauthorized.