How it works: The editor JS automatically contacts https://texteditor.worksahayak.com/editor/api/token with your secret key. The server validates your domain is whitelisted, then issues a 10-minute session token. The editor only activates with a valid token.