wam: fail closed on the ingest API, require a bearer token
wam: authenticate the ticket API with a shared bearer token
wam: bridge to the wam-overview wiki note and add a README (/dellm)