Endpoints that a HOST system (e.g. AlthoSalud or a third-party EHR) must implement under its own host_base_url so the Altha bot can call them. Every request from Altha sends Authorization: Bearer <host_api_key> and X-Altha-Host-Protocol: 1.