tibeuru-api - endpoints live under /api/*