Stage 39 — School Info API

GET /api/v1/school-info/

Bearer-token protected, read-only school branding/contact information.
Returns school_name, email, phone and status only.
No schema changes. Credentials are never returned.
