Macklin API paths used by the supplier module, relative to its API host.

Macklin API paths that only respond to an authenticated session. Kept apart from ApiEndpoints so callers can tell which requests need credentials.