Grafbase resolvers Resolvers are grouped: all resolvers in root are authenticated using Hanko auth token resolvers in public don't have any auth setup resolvers in internal are auth'd using a secret key passed