API key (nskey_live_...) or JWT token. API key is checked first;
if not found, falls back to Devise JWT authentication.
Updated account
Signed blob ID
Signed blob ID
free, paid, trusted JSONB — keys are step names, values are completion metadata