fix(auth): C1 review polish — guard name at seam, document seam contract (throws/O(n)), explicit cookie test (review #1/#2/#3/#5/#8)

src/ZB.MOM.WW.ScadaBridge.Commons/Interfaces/Security/IInboundApiKeyAdmin.cs

@@ -34,6 +34,13 @@ public sealed record InboundApiKeyCreated(string KeyId, string Token);
 /// their method-scopes. The interface lives in Commons and is deliberately free of any
 /// dependency on the underlying auth library, so consumers depend only on this contract.
 /// </summary>
+/// <remarks>
+/// Mutating operations (<see cref="CreateAsync"/>, <see cref="SetEnabledAsync"/>,
+/// <see cref="SetMethodsAsync"/>, <see cref="DeleteAsync"/>) may <b>throw</b> on
+/// store-level or configuration failures (e.g. an unavailable pepper) rather than
+/// exclusively signalling failure via their <c>bool</c> return — callers must handle
+/// exceptions in addition to checking the return value.
+/// </remarks>
 public interface IInboundApiKeyAdmin
 {
     /// <summary>Creates a new key scoped to <paramref name="methods"/> and returns its
@@ -58,9 +65,11 @@ public interface IInboundApiKeyAdmin
     Task<bool> DeleteAsync(string keyId, CancellationToken ct = default);
 
     /// <summary>Returns the method-scope set for a key, or an empty list if not found.</summary>
+    /// <remarks>Enumerates the full key list (O(n)); intended for admin-scale use, not hot paths.</remarks>
     Task<IReadOnlyList<string>> GetMethodsForKeyAsync(string keyId, CancellationToken ct = default);
 
     /// <summary>Returns the identifiers of all keys whose scopes contain
     /// <paramref name="methodName"/>.</summary>
+    /// <remarks>Enumerates the full key list (O(n)); intended for admin-scale use, not hot paths.</remarks>
     Task<IReadOnlyList<string>> GetKeysForMethodAsync(string methodName, CancellationToken ct = default);
 }

src/ZB.MOM.WW.ScadaBridge.Security/LibraryInboundApiKeyAdmin.cs

@@ -34,8 +34,11 @@ public sealed class LibraryInboundApiKeyAdmin : IInboundApiKeyAdmin
     public async Task<InboundApiKeyCreated> CreateAsync(
         string name, IReadOnlyCollection<string> methods, CancellationToken ct = default)
     {
+        ArgumentException.ThrowIfNullOrWhiteSpace(name);
         ArgumentNullException.ThrowIfNull(methods);
 
+        // "N" format = 32 hex chars, no hyphens/underscores — the library rejects underscores
+        // in keyId because they delimit the sbk_<keyId>_<secret> token.
         var keyId = Guid.NewGuid().ToString("N");
         var result = await _admin.CreateKeyAsync(
             keyId, name, methods.ToHashSet(StringComparer.Ordinal),