Better Auth session endpoint: /api/auth/*

Required role for full access: platform_superadmin.