2 Commits

Include renames

Author	SHA1	Message	Date
Gokulvarthan-Ramesh	1d794ca425	fix(security): resolve 403 Forbidden on voice turn - normalize patient ID matching with PAT-prefix support - Bearer token now prioritized over X-API-Key for identity resolution - Master API key gets admin role for service-to-service bypass - Centralized verify_session_ownership helper across all IDOR checks - Files: security.py, voice_onboarding.py, onboarding.py, documents.py	2026-08-31 15:09:25 +05:30
Gokulvarthan-Ramesh	e91cdbae6e	feat(api): production security, cors hardening, latency optimizations, postman artifacts & frontend documentation	2026-08-31 13:48:54 +05:30