API KEYS

Bearer tokens for programmatic access and MCP clients. Keys are project-scoped and stored as bcrypt hashes — the plaintext is shown once on creation.