Ingest
Complete an ingest upload
Mark a Black Hole upload complete after GCS put.
POST
Complete an upload (verify + land UNMATCHED)
Agent signals the bytes are in GCS. The server verifies sha256 and claims RECEIVED. Do not retry a successful complete as a new register.
Authorizations
Auth0 access token for a signed-in user. Send Authorization: Bearer <token>.
The SPA and desktop agent use this. Prefer an organisation API key for
server-to-server integrations.

