API authentication

BoxAI (you-box.com) — Authenticate to BoxAI with API keys. Prefer server-side callers and rotate leaked credentials immediately.