Full-text search a registry’s published, public entries

Authenticate every request with Authorization: Bearer <token> — a JWT or API token.