feat(api): standardize REST contracts and auth

tests/api/test_burst_detection_endpoints.py

@@ -6,9 +6,7 @@ from app.api.v1.endpoints import burst_detection as burst_detection_endpoint
 
 def _build_client() -> TestClient:
     app = FastAPI()
-    app.include_router(
-        burst_detection_endpoint.router, prefix="/api/v1/burst-detection"
-    )
+    app.include_router(burst_detection_endpoint.router, prefix="/api/v1")
     app.dependency_overrides[
         burst_detection_endpoint.get_current_keycloak_username
     ] = lambda: "tester"
@@ -36,7 +34,7 @@ def test_detect_burst_forwards_target_mode_fields(monkeypatch):
     )
 
     response = _build_client().post(
-        "/api/v1/burst-detection/detect/",
+        "/api/v1/burst-detections",
         json={
             "network": "demo",
             "scheme_name": "burst-history",