* feat(openapi): allow app-level API Key display and restrict scope
- Expose raw API Key in app-level listing to support key replication
- Restrict app-level API Key usage to chat completion endpoints only
- Add COPY_API_KEY audit event for tracking key access
- Implement API Key request path validation for security enforcement
* feat(openapi): support API key auth proxy for team members
- Add `authProxy` configuration to team-level API keys.
- Implement `ChatCompletionAuthProxy` schema for optional identity
delegation in chat completion requests.
- Add `resolveChatCompletionEffectiveTmbId` to handle proxy logic,
ensuring members exist within the key's team.
- Update `authChatCompletionHeaderRequest` to integrate identity
proxying while maintaining strict security boundaries for chat access.
- Add internationalization support for the new feature in settings.
* feat(openapi): distinguish global and app API keys
- Update documentation to clarify the distinction between Global and App
API keys.
- Enforce `authProxy` permissions: only allow team owners to enable
`authProxy` on Global API Keys.
- Restrict `authProxy` usage to Global API Keys; App API Keys do not
support this feature.
- Migrate API key management UI to `MyModalV2`.
- Add test coverage for API key update permissions.
* fix(openapi): update new API key tip copy
* fix(openapi): copy API key without modal
* fix(openapi): address API key review comments
* fix(openapi): ensure API key copy audit completes
