GraphQL endpoint for site content

Query published pages and blog posts over GraphQL. The root fields mirror the REST collections: Pages, Page, BlogPosts, BlogPost, BlogCategories, Authors, each accepting where, limit, page and sort arguments and returning the same paginated envelope. Introspection is disabled in production. Rate limited to 60 requests per client IP per 60 seconds; see the response headers.