POST /api/v1/transactions Idempotency-Key: 7a9f3c1e-... (client-generated) Authorization: Bearer <token> Content-Type: application/json