Whoami

Return the caller's verified identity: tenant, service, and credential linkage.

Lightweight endpoint for clients to read backend-verified context without trusting locally-stored credential files. Works for all token types (Project Key, API token, user token).