Authentication

Use X-Agentvoke-Agent-Key for agent calls.

User sessions are device-local and remain active until logout unless server config explicitly sets an expiry.