Data APIs
Outbound super-app API catalog, consumer keys, and usage.
Authority seam: pluggable Bosowa-Portal check, default-OFF (config: AUTHORITY_PROVIDER)
Endpoint Catalog
Catalogued outbound endpoints. Sync to refresh from the live route table; toggle exposure per endpoint.
Consumers & Keys
External API consumers (e.g. the super-app). Issued keys are shown once at creation and stored only as a hash.