Browser-initiated downloads (window.open) cannot set Authorization headers. Accept ?token= query parameter as fallback on the report download and coding-template endpoints. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
These files were created by a subagent but not included in the commit. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>