Z.AI fetch. Note the auth-header quirk — the API key is passed as Authorization: <KEY> WITHOUT the Bearer prefix. Sending Bearer … returns 401.
Authorization: <KEY>
Bearer
Bearer …