Protected newsroom
In production, place this Worker behind Cloudflare Access. The API also requires a separate admin token.