smoke-test-authenticated-api-routes

Create a minimal smoke-test plan for authenticated API routes (happy path, one negative case, and persistence checks).