test(api-keys): cover create/list/delete lifecycle and prefix match

[Jagadeeshftw]

Summary

Adds src/__tests__/apiKeys.test.ts, covering the full lifecycle of the API-key endpoints with no production code changes.

• POST /api/v1/api-keys — returns 201 with a key starting srk_ and the echoed label; validates the 1–64 char label boundary (empty and 65-char rejected with 400 invalid_request + requestId; 64-char accepted).
• GET /api/v1/api-keys — items carry prefix, label, createdAt; asserts no item exposes a key field and the raw key string never appears in the response body.
• DELETE /api/v1/api-keys/:prefix — deletes by the 8-char prefix (204) and confirms removal from the listing; unknown prefix returns 404 not_found.

Closes #83

Test output

PASS src/__tests__/apiKeys.test.ts
Tests:       7 passed, 7 total

Security notes

Asserts the raw secret key is never returned by the list endpoint (only the 8-char prefix), guarding against credential leakage in API responses.

[mikewheeleer]

solid lifecycle coverage for the api-keys. merging 🚀