Separating public and control APIs by default

Admin access should never share a surface with your public API. ZyroStack runs the control API on a separate domain, with its own auth and isolation.

This makes it far harder to accidentally expose privileged endpoints, and it keeps your blast radius small if a public key leaks.