V1
External API (/v1/external/sms/*) — authorize with X-API-Key. Dashboard API (/v1/dashboard/*) — call POST /v1/dashboard/auth/login first, then authorize with the JWT as Bearer <token>. Legacy paths /v1/sms/* redirect to the external endpoints.