card-writer server

Auth + API backend for the card-writer desktop app.

Endpoints

• POST /api/auth/sign-up/email — register (email + password)
• POST /api/auth/sign-in/email — log in, returns a session token
• GET /api/auth/token — exchange a session for a JWT
• GET /api/auth/jwks — public keys to verify JWTs
• GET /api/health — health check
• GET /api/me — current user (requires auth)