Cozy Business API

Accounts, cloud saves and purchases. The game itself is a separate deployment.

• POST /api/auth/google — exchange a Google ID token for a bearer token
• GET /api/me — the signed-in player and what they own
• GET /api/save, PUT /api/save — cloud save
• POST /api/stripe/checkout — start a purchase
• POST /api/stripe/webhook — Stripe only
• GET /api/health — liveness