{"service":"jwt-weak-secret-challenge","endpoints":{"POST /register":"{ username, password }","POST /login":"{ username, password } -> { token }","GET /me":"Authorization: Bearer <token>","GET /admin":"Authorization: Bearer <token> (role must be admin)"}}