Stage 15 — API Academic Results

Academic results endpoint is installed.

• Protected endpoint: /api/v1/results/
• Bearer-token authentication required.
• Read-only; no result records are created, edited, or deleted.
• Pupil/student accounts are restricted to their own results.
• Parent accounts are restricted to their own children's results.
• Admin and approved staff roles may retrieve results.
• Optional filters: pupil_id, class_id, session, term.
• Pagination: limit and offset.
• No database schema changes.