forked from mirror/crumbs-original
- API key generation with SHA-256 hashing and crumbs_ prefix - User-scoped key validation, listing, and deletion - Bearer token auth in hooks.server.ts for /api/mcp paths - Populates event.locals.user from API key for downstream scoping - 13 unit tests covering CRUD, validation, and user isolation Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>