/v1/sms/* or /v1/external/sms/*) — authorize with X-API-Key.
Dashboard API (/v1/dashboard/*) — call POST /v1/dashboard/auth/login first, then authorize with the JWT as Bearer <token>.
Account numbers are assigned automatically on approval: VS-C## (user), VS-A## (admin), VS-SA## (super admin).