bearerAuth:
  type: http
  scheme: bearer
  bearerFormat: JWT
  description: Cognito ID token preferred. Access tokens require an email claim. Local DEV_AUTH_BYPASS skips verification.