Check authentication status
Public endpoint returning the caller's session state.
Always returns HTTP 200 so clients can poll without treating an
unauthenticated caller as an error.
Response
Authentication status
authenticated
Whether the request carries a valid session
secure_mode_enabled
Whether Secure Mode is active on the device
user
Session subject (null when unauthenticated)
role
Effective role from the session (null when unauthenticated)

