Auth
Authentication-adjacent endpoints (login URLs, locale).
Get login metadata (unauthenticated)
Returns auth metadata for the calling client. Currently a placeholder that echoes a static login URL; intended to evolve into the tenant-aware login bootstrap.
Update the current user's locale
Persists the chosen locale on the Cognito user (best-effort coerced to one of the supported languages). The bearer token in `Authorization` identifies the user.