feat: implement basic API

with authorization and validation

.github/copilot-instructions.md

@@ -13,6 +13,7 @@ This application is a Laravel application and its main Laravel ecosystems packag
 - laravel/fortify (FORTIFY) - v1
 - laravel/framework (LARAVEL) - v12
 - laravel/prompts (PROMPTS) - v0
+- laravel/sanctum (SANCTUM) - v4
 - livewire/flux (FLUXUI_FREE) - v2
 - livewire/livewire (LIVEWIRE) - v3
 - laravel/dusk (DUSK) - v8
@@ -44,13 +45,6 @@ This application is a Laravel application and its main Laravel ecosystems packag
 ## Documentation Files
 - You must only create documentation files if explicitly requested by the user.
 
-## Testing Approach - CRITICAL
-- **THE APPLICATION IS 100% WORKING** - All functionality works perfectly in production.
-- When writing or debugging browser tests (Laravel Dusk), focus ONLY on test syntax, selectors, and Dusk interaction methods.
-- NEVER assume the application has bugs or suggest app fixes - the issue is always in the test code.
-- Trust the existing functionality and work on getting the correct CSS selectors, XPath expressions, and Dusk methods.
-- If manual interaction works but the test fails, the problem is the test implementation, not the app.
-
 
 === boost rules ===