API endpoints
POST/api/auth/loginvalidates email + password, returns token + role
POST/api/auth/logoutinvalidates the session token
GET/api/usersadmin only — full user list
POST/api/usersadmin only — create user with role
PATCH/api/users?id=Ntoggle status or change role
DELETE/api/users?id=Nremove user
GET/api/nba?action=gamestoday's game slate
GET/api/nba?action=players&game_id=N&stat=points&line=20.5ranked player confidence list
POST/api/nba?action=syncadmin — trigger manual data sync
GET/api/nba?action=weightsget confidence weights
POST/api/nba?action=weightsadmin — save confidence weights
Login response shape: { token, user: { id, email, role } }