This service is gRPC-only (Argon2id, no public REST surface). It is called over the internal network via gRPC and is not routed through the API gateway; the specification below documents its capabilities and cannot be called over HTTP in production.