Memory API
Authentication
One bearer token per project. The project is the boundary of a memory.
Every request carries Authorization: Bearer $REVO_API_KEY. The token resolves its project server-side, and a token can never read or write another tenant's content.
If the token reaches more than one project, pass teamId on each request to name the intended one. A single-project token needs nothing. The wire name is still teamId: the field predates the rename from workspace to project and has not changed.