TimStore API — serverless. All routes are handled by /api (see vercel.json rewrites).