The InsureCare API: Medline posts a supply request, we create the order.

The body is taken as a plain dict rather than a typed CreatePSR so that validation stays in create_psr_common: Medline's published contract answers a bad payload with the CreatePSRResponse envelope, which FastAPI's own 422 would replace, and the raw request is logged before validation runs. A dict (not Any) because FastAPI hands the parameter raw bytes when the content type isn't JSON, which the logging of the body can't serialize.

The api-key check is skipped in development so the endpoint can be exercised locally without the shared secret.