NEXUS Beta backend — API only. GET /health, everything else is authenticated POST.