POST
/api/upload
Upload media with magic-bytes & volume fallback
GET
/health
Real-time health & database telemetry check
POST
/api/auth/login
Admin authentication & secure JWT issuance
POST
/api/contact
Customer contact inquiry with rate limiting
GET
/api/admin/inbox
Live email sync and admin conversation thread
GET
/uploads/:filename
Static uploaded media delivery with nosniff