Marketplace searches now authenticate to the DomainDetails API gateway with a short-lived signed token, obtained automatically. This protects the public API from large-scale scraping. Lookups fall back to the previous behaviour if the token service is unreachable. No new permissions.