spotify-widget-api

Backend for the iPhone Spotify widget. Two routes, both requiring an x-widget-key header:

• GET /api/now-playing
• POST /api/command

The Spotify credential lives here as a Cloudflare secret so the phone carries none.