API key (nskey_live_...) or JWT token. API key is checked first;
if not found, falls back to Devise JWT authentication.
Account with brand, onboarding state, and volume budgets
Signed blob ID
Signed blob ID
free, paid, trusted JSONB — keys are step names, values are completion metadata