Authentication: All API requests require the header X-Auth-User-ID: test-user-123 for testing. In production, this is set by the API Gateway after JWT validation.