#api API Authentication & Authorization: An Engineering Deep Dive into Mechanisms, Trade-offs, and Failure Modes