Establishing a session

The complete bootstrap for a monitoring integration:

# 1. An administrator mints a scoped read-only key (one time, from an admin key
#    or the UI). The raw value is returned exactly once.
curl --cacert bng-ca.pem 
     -H "Authorization: Bearer $ADMIN_KEY" 
     -H "Content-Type: application/json" 
     -d '{"id":"nms-poller","role":"read_only","label":"NMS collector",
          "ip_allowlist":["10.20.0.0/24"]}' 
     https://bng-edge-01:8443/api/bng/api-keys

# 2. The integration polls with that key. No CSRF token, no cookie.
curl --cacert bng-ca.pem 
     -H "Authorization: Bearer quantum_…" 
     https://bng-edge-01:8443/api/bng/health

# 3. The same key reaches the raw telemetry plane through the passthrough.
curl --cacert bng-ca.pem 
     -H "Authorization: Bearer quantum_…" 
     https://bng-edge-01:8443/v1/bng/counters