Resolve the authenticated actor's effective POS scopes (MCP gateway alias)
Compatibility alias of GET /v1/auth/whoami mounted at /api/auth/whoami for the solya-api-mcp gateway, which hardcodes that path for its permission-aware discovery. It is IDENTICAL to the canonical operation in every respect — same authentication, same (empty) scope requirement, and the same { data: { effectivePermissions } } envelope served from the same handler. When driving the API yourself, call GET /v1/auth/whoami directly (see it for the full contract); this path exists only for the gateway.
Authorizations
Authorization: Bearer <token>. Accepts EITHER a Keycloak access token (scopes-in-token) OR an opaque POS session token; both resolve to the same pos.* scope vocabulary the route guards enforce.
Response
The caller's effective POS scopes, sorted and de-duplicated, under a data envelope.
The caller's effective POS scopes, sorted and de-duplicated, under a data envelope.

