unauthorized (401)
No valid credential. A game-scoped call needs the publishable key; a player-scoped call also needs a player token.
Send `X-Triggair-Key: tg_pk_…`. For player calls, call login() first (the SDK does this automatically) so a `Authorization: Bearer <token>` is attached. If a token expired, the SDK refreshes and retries once.