9.47Process API shouldn't pass Salesforce auth through

Bad architecture:

Mobile
 ↓ Salesforce token
Experience API
 ↓
Process API
 ↓
System API
 ↓
Salesforce

The consumer shouldn't normally need backend credentials.

The System API owns its Salesforce authentication.

That's another decoupling benefit.