Suppresses wake-up signals (WebSocket push, webhook delivery) for future messages from the target. The envelopes are still written so /v1/messages/sync drains them when the caller chooses to look. Idempotent on (muter, kind, target_id) — repeating the call with a fresh muted_until refreshes the expiry.
API key issued at registration, sent as Authorization: Bearer <key>.