Dashboard and API routes use Clerk. Session claims include metadata.role and clientId for tenant scoping. Internal webhook routes require x-internal-webhook-secret.
Dashboard and API routes use Clerk. Session claims include metadata.role and clientId for tenant scoping. Internal webhook routes require x-internal-webhook-secret.