Users API

All endpoints require Authorization: Bearer <token> and ADMIN role.

GET /api/users

Returns all user accounts.

{
  "users": [
    {
      "id": "uuid",
      "email": "admin@example.com",
      "role": "ADMIN",
      "createdAt": 1700000000000,
      "updatedAt": 1700000000000
    }
  ]
}

PATCH /api/users/:id

Update a user’s role. Body:

{ "role": "MANAGER" }

DELETE /api/users/:id

Delete a user. Returns { "ok": true }. Cannot delete your own account.