Integration basics
Base URL: `http://localhost:4000`
Authentication: use JWT via `Authorization: Bearer <token>` or rely on the `qirimwa_token` cookie when the caller is the QirimWa web app.
Response format: secured endpoints return JSON under a top-level `data` object.
Tenant scope: all contacts, conversations, direct messages, and campaigns are automatically scoped to the authenticated tenant.
