API sessions

Authenticate to obtain a bearer token for the redloop lab API, then call admin endpoints with Authorization: Bearer <token>.

POST /c10/login   {"email": "...", "password": "..."}  -> {"token": "..."}
GET  /c10/admin   Authorization: Bearer <token>          -> admin data