Authentication Endpoints

# Authentication Endpoints (v1)

All requests to the protected `api.donor.money` or `api.sirgiving.org` routes require a Bearer token in the Authorization header.

### Generate Token
`POST /api/v1/auth/login`

**Request Body (JSON)**
```json
{
  "email": "user@example.com",
  "password": "securepassword"
}

Success Response (200 OK) Returns a short-lived JWT access token and a refresh token.

JSON

{
  "access_token": "eyJhbGciOiJIUzI1NiIs...",
  "expires_in": 3600,
  "refresh_token": "def502005e8b4..."
}