📄️ API Key Authentication
The notification HTTP endpoints use API key validation rather than JWT bearer tokens. This is because the endpoints are designed for machine-to-machine communication — called by other services in the platform, not by end users.