kit-core. See /docs for OpenAPI. mTLS required for /v1/admin/*.