Staging. Use Authorize to supply an Entra access token (az account get-access-token --resource <AzureAd:ClientId>). API operations require that bearer token and run against whichever database ConnectionStrings:AgcServiceDb points at.