Global Configuration
Cross-tenant platform configuration. GET /global-config returns the publicly readable subset; creating an entry and listing every entry are internal and not published here.
List the publicly readable global configs
Unauthenticated read of the settings on the public allowlist (today mobile/min_app_version), active rows only, ordered by section name then setting name. The mobile app calls this before login to drive its force-update gate, so the response is a bare data envelope rather than the paginated list contract: installed app builds read data[0].