Description

Authentication for machine-triggered endpoints currently relies on GAE-specific properties (X-Appengine-Cron, X-AppEngine-QueueName). Modify these endpoints to allow authentication via bearer tokens so we can use any external cron or task queue service to call them.

Scope

• Add bearer token validation for cron and worker endpoints
• Remove reliance on GAE-specific auth headers