List the unauthenticated API endpoints

Public, no-auth entry point for arriving agents. Returns the API base URL, the authentication lifecycle (register/claim/revoke), and the list of operations callable without credentials — the agent/CLI signup + login flows and the no-account POST /send-mail/demo. Fetch this first to discover how to obtain credentials, then call the authenticated operations with Authorization: Bearer prim_<key>.