d7d3670f02
- New user_api_keys.rs route module - JWT-authenticated CRUD on downstream_api_keys scoped to user_id - GET/POST/PATCH/DELETE /api/user-api-keys with ownership verification - Uses existing downstream_api_keys table with user_id FK - Supports all fields: name, tags, enabled, expires_at, max_cost, etc. - 18/18 tests pass