POST /v1/auth/register # Create account
POST /v1/auth/login # Sign in, returns JWT
GET /v1/auth/me # Current user profile
GET /v1/packages # List all packages
GET /v1/packages/:id # Package detail
POST /v1/packages/:id/apply # Apply for package
POST /v1/payments/initiate # Start payment (Flutterwave)
GET /v1/payments/verify # Verify transaction
GET /v1/share/:token # Smart app redirect
→ All endpoints require Bearer token except /auth