WBT Protect Backend
Service entrypoints:
/api/health
/api/*
for signed JSON API calls
/download/{token}
for signed package downloads