Routes under
/document-reviews/me use the identity of the logged-in customer. They are
part of the customer UI and are not exposed to API keys. Uploading and submitting a
customer’s documents also remain customer actions in that UI.