feat(auth): ScadaBridge inbound API — adopt ZB.MOM.WW.Auth.ApiKeys verifier + Bearer + scope=method (re-arch A+B); additive, old path retired later

src/ZB.MOM.WW.ScadaBridge.InboundAPI/ZB.MOM.WW.ScadaBridge.InboundAPI.csproj

@@ -25,6 +25,12 @@
 
   <ItemGroup>
     <PackageReference Include="Microsoft.CodeAnalysis.CSharp.Scripting" />
+    <!-- Inbound-API auth re-arch (A+B): the POST /api/{methodName} auth path is
+         served by the shared ZB.MOM.WW.Auth.ApiKeys verifier (Bearer sbk_<keyId>_<secret>,
+         scope = method name) instead of the legacy peppered-HMAC X-API-Key path.
+         AddZbApiKeyAuth (DI helper) lives in this package and brings the
+         Abstractions contracts (IApiKeyVerifier / ApiKeyOptions) transitively. -->
+    <PackageReference Include="ZB.MOM.WW.Auth.ApiKeys" />
   </ItemGroup>
 
 </Project>