JENNi Brand portal API
What a signed-in BRAND user sees at the brands host: their brand profile (name, accent colour, site URL), publishable widget keys bound to their origins, a coverage preview of their site, shopper demand by 3-digit ZIP prefix, and the orders their widget tag produced. Called with a partner access token (`Authorization: Bearer …`), never an API key. The tenant is always the signed-in account: a tenant in a query or body is ignored. provider-bff forwards profile and key calls to identity-service, coverage and demand to product-availability-service and orders to order-j; every body is re-mapped through a fixed allow-list, so no shopper name, e-mail, phone, street or full postal code is ever returned. Ships dark behind `ENABLE_BRAND_PORTAL`.