BillBene API v1

One Rust API serves the web app and the upcoming Flutter mobile app. Cookie sessions with CSRF for browsers, bearer tokens for mobile. Money writes require idempotency keys.