weitere updates für instanzierbarkeit und sauberes testing

lib/Http/ApiBootstrap.php

@@ -27,9 +27,9 @@ class ApiBootstrap
      * Initialize the API request context.
      *
      * Call this at the top of every API page action.
-     * Sets MINTY_ALLOW_OUTPUT, CORS headers, authenticates via Bearer token.
+     * Sets MINTY_ALLOW_OUTPUT, CORS headers and optional Bearer auth.
      */
-    public static function init(): void
+    public static function init(bool $requireAuth = true): void
     {
         if (self::$initialized) {
             return;
@@ -51,9 +51,11 @@ class ApiBootstrap
 
         self::enforceRateLimit();
 
-        $authenticated = ApiAuth::authenticate();
-        if (!$authenticated) {
-            ApiResponse::unauthorized();
+        if ($requireAuth) {
+            $authenticated = ApiAuth::authenticate();
+            if (!$authenticated) {
+                ApiResponse::unauthorized();
+            }
         }
     }