API Authentication (Sanctum / Passport)