GET /api/v1/projects/:slug/posts etc. Read-only is enough for v1 — write later. Rate-limited per IP and per project key. Useful for status pages and shipping internal dashboards on top of Hollahoop.