# Auth Service

Owns: user registration, login, JWT RS256 issuance, token refresh, `/me` endpoint.

## Tables owned
- `users`
- `refresh_tokens`
- `subscriptions` (read; Billing Service writes)

## Endpoints
- `POST /auth/register`
- `POST /auth/login`
- `POST /auth/refresh`
- `GET /auth/me`
- `PUT /auth/me`
- `GET /auth/verify` (ForwardAuth for Traefik)