Public
Unauthenticated endpoints (public branding, login probes).
Get login metadata (unauthenticated)
Returns auth metadata for the calling client. Currently a placeholder that echoes a static login URL; intended to evolve into the tenant-aware login bootstrap.
Get template JSON (public)
Returns the resolved template JSON (and optional feedback) for the calling tenant. Supports `If-None-Match` against the per-language ETag for 304 responses. **Note:** not currently mounted in `routes/index.js` — kept here so the spec mirrors source. Requires `X-Tenant-Id` but no bearer token.