Client-side speech-to-text (JWT-based)

Identical to the standard /api endpoint, but uses a client token (JWT) in the Authorization header instead of an org-level API key.