Buildy HTTP API

Easiest path: run Buildy's device-pairing flow described in Buildy auth. Start with POST https://app.buildy.so/api/pair/start to get a device_code, user_code, and verification_url; show the user_code to the human, send them to https://app.buildy.so/pair, then poll POST https://app.buildy.so/api/pair/poll until the response returns a plaintext bld_user_* token. As a browser-based alternative, sign in at Buildy login and mint a token with POST https://app.buildy.so/api/token as documented in Buildy auth.

Create an anonymous app with POST https://app.buildy.so/app and no Authorization header; the create response returns a one-time plaintext bld_app_* token for that app only. Buildy documents this in Buildy auth and in the OpenAPI spec. The token expires if the anonymous app is not claimed.