Version 1.5.0 — Phase 6 (hardening)
GET /health — statusGET /version — versionPOST /api/tickets — create ticket (requires rms_account cookie)GET /api/tickets — list ticketsGET /api/tickets/:id/ws — WebSocket (requires cookie + ownership)POST /api/tickets/:id/uploads?filename=shot.png — upload file (raw body, max 10 MB)GET /api/attachments/:id — authorized downloadUnauthenticated /api/* requests redirect to the account login. For local WebSocket tests, set a valid rms_account JWT cookie first, or use a tool that can send the cookie with the upgrade request.