One app surface, one API surface.
The app runs at https://staging.folio.elf.dance. The direct API runs at https://staging.api.folio.elf.dance. Browser-facing API paths are also mounted on the app host so session cookies and MCP auth stay aligned for testing.