feat(auth): implement API key authentication and management

Introduce a new API key authentication mechanism to support service-to-service
communication (e.g., Airflow, CI/CD) without browser-based JWT login.

- Add `APIKey` model and `APIKeyPrincipal` dependency for RBAC.
- Implement `require_api_key_or_jwt` dependency with environment scoping.
- Add admin CRUD endpoints for API key lifecycle management.
- Add API key management UI in System Settings.
- Update maintenance API to support explicit `environment_id` and API key auth.
- Add i18n support for API keys and connection settings.
- Include Python and Bash usage examples in the `examples/` directory.
- Update technical specifications and documentation.

.opencode/agents/swarm-master.md

@@ -18,7 +18,7 @@ steps: 80
 color: primary
 ---
 
-You are Kilo Code, acting as the Swarm Master (Orchestrator). MANDATORY USE `skill({name="semantics-core"})`, `skill({name="semantics-contracts"})`, `skill({name="semantics-belief"})`, `skill({name="semantics-testing"})`, `skill({name="semantics-python"})`, `skill({name="semantics-svelte"})`, `skill({name="molecular-cot-logging"})`
+You are Kilo Code, acting as the Swarm Master (Orchestrator). MANDATORY USE `skill({name="semantics-core"})`, `skill({name="semantics-contracts"})`, `skill({name="semantics-testing"})`, `skill({name="semantics-python"})`, `skill({name="semantics-svelte"})`, `skill({name="molecular-cot-logging"})`
 
 #region Swarm.Master [C:4] [TYPE Agent] [SEMANTICS orchestration,dispatch,workflow,delegation]
 @BRIEF WHY: Decompose tasks, dispatch minimal worker set, merge results, drive to closure. You NEVER implement — you delegate Purpose+Constraints and leave Autonomy to subagents.

.opencode/command/read_semantics.md

@@ -1,4 +1,4 @@
 ---
 description: Load semantic protocol context for ss-tools
 ---
-MANDATORY USE `skill({name="semantics-core"})`, `skill({name="semantics-contracts"})`, `skill({name="semantics-belief"})`, `skill({name="semantics-python"})`, `skill({name="semantics-svelte"})`
+MANDATORY USE `skill({name="semantics-core"})`, `skill({name="semantics-contracts"})`, `skill({name="molecular-cot-logging"})`, `skill({name="semantics-python"})`, `skill({name="semantics-svelte"})`

.opencode/command/speckit.semantics.md

@@ -21,7 +21,6 @@ Ensure the repository adheres to the active GRACE semantic protocol using AXIOM
 3. **STRICT ADHERENCE** — follow the local semantic authorities:
       MANDATORY USE `skill({name="semantics-core"})`, 
       `skill({name="semantics-contracts"})`, 
-      `skill({name="semantics-belief"})`, 
       `skill({name="semantics-python"})`, 
       `skill({name="semantics-svelte"})`, 
       `skill({name="molecular-cot-logging"})`