Public hub league cohort of the current season board (surface-gated)

Authenticate every request with Authorization: Bearer <token> — a JWT or API token.