inQRable API — placeholder. /v1 endpoints live once apps/web deploys.