Bootstrap configurations and experiments

Everything an SDK needs on load, in one call: every live configuration for the authenticated environment (id, name, alias, content hash and the configuration document itself), which of them is primary, and every active experiment split by unit type. Experiments are returned without their changesets — use GET /sdk/v2/experiments/active when changeset operations are needed for local merging. Private experiments are returned to secret keys only.