PocketBase v0.23+ requires 'Bearer <token>' — sending the raw JWT without the prefix results in 403 'Only superusers can perform this action' on all collection record endpoints. Fix applied in three places: - ui/src/lib/server/pocketbase.ts (pbGet, pbPost, pbPatch helpers) - scraper/internal/storage/pocketbase.go (pbClient.do) - scripts/pb-init.sh (wget --header in create_collection)