pr-assets: GET /<key> | PUT /<key> (Bearer token)