BFF Writes and Auth

Server-side writes

Create notes through a Route Handler that uses the project API token.

Sign in as a project user
Open the protected new-note form
The BFF calls me() then content.create with author-name / author-user-id

Never put ELMAPI_API_KEY in the browser.