Create a Session Token
Authentication
Agora access key (cleartext), sent as Authorization: Bearer <accessKey>. Used only by POST /v0/auth/token to mint a session JWT.
Response
Short-lived session JWT. Send it as Authorization: Bearer <sessionJwt> on every authenticated endpoint.

