Sankofa Journal Step 13: A Small API

Add two JSON endpoints: a list of published posts and a single post by id. Name the fields explicitly and confirm nothing private is in the output by reading the raw response rather than assuming. Wrap the list in an object with a count and support a page parameter. Then check the unpublished case specifically: request a draft's id through the API as a stranger and make sure it is not returned. It is easy to secure the HTML pages and forget the API points at the same data.