feat: add auth header to API calls, add login and listJobs API functions

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

frontend/js/api.js

@@ -12,6 +12,13 @@ const BASE = '';  // same-origin; empty string = relative to current host
  * @returns {Promise<any>}
  */
 async function apiFetch(path, opts = {}) {
+  const session = JSON.parse(sessionStorage.getItem('aperture_session') || 'null');
+  if (session) {
+    opts.headers = {
+      ...opts.headers,
+      'Authorization': `Bearer ${session.email}:${session.token}`,
+    };
+  }
   const defaults = {
     headers: { 'Content-Type': 'application/json', ...(opts.headers || {}) },
   };
@@ -91,3 +98,25 @@ export function packageUrl(jobId) {
 export function mapUrl(jobId, indicatorId) {
   return `${BASE}/api/jobs/${jobId}/maps/${indicatorId}`;
 }
+
+/* ── Auth ───────────────────────────────────────────────── */
+
+export async function requestMagicLink(email) {
+  return apiFetch('/api/auth/request', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ email }),
+  });
+}
+
+export async function verifyToken(email, token) {
+  return apiFetch('/api/auth/verify', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ email, token }),
+  });
+}
+
+export async function listJobs() {
+  return apiFetch('/api/jobs');
+}