feat(auth)!: ScadaBridge retire SQL Server ApiKey entity + ApprovedApiKeyIds + legacy hashing; EF migration RetireInboundApiKeyStore; re-issue runbook + CHANGELOG (re-arch C5/E) — BREAKING: X-API-Key -> Bearer sbk_, keys re-issued

src/ZB.MOM.WW.ScadaBridge.ConfigurationDatabase/Configurations/InboundApiConfiguration.cs

@@ -4,29 +4,11 @@ using ZB.MOM.WW.ScadaBridge.Commons.Entities.InboundApi;
 
 namespace ZB.MOM.WW.ScadaBridge.ConfigurationDatabase.Configurations;
 
-public class ApiKeyConfiguration : IEntityTypeConfiguration<ApiKey>
-{
-    /// <summary>Configures the EF Core mapping for the <see cref="ApiKey"/> entity.</summary>
-    /// <param name="builder">Entity type builder used to apply the configuration.</param>
-    public void Configure(EntityTypeBuilder<ApiKey> builder)
-    {
-        builder.HasKey(k => k.Id);
-
-        builder.Property(k => k.Name)
-            .IsRequired()
-            .HasMaxLength(200);
-
-        // ConfigurationDatabase-012: the bearer credential is persisted only as a
-        // deterministic HMAC-SHA256 hash, never as plaintext. Base64 of a 32-byte
-        // HMAC-SHA256 digest is 44 characters; 256 leaves generous headroom.
-        builder.Property(k => k.KeyHash)
-            .IsRequired()
-            .HasMaxLength(256);
-
-        builder.HasIndex(k => k.Name).IsUnique();
-        builder.HasIndex(k => k.KeyHash).IsUnique();
-    }
-}
+// Auth re-arch (C5): the SQL Server ApiKey entity was retired — inbound API keys now
+// live in the shared ZB.MOM.WW.Auth.ApiKeys SQLite store. The former
+// ApiKeyConfiguration (and the ApiMethod.ApprovedApiKeyIds mapping) were removed; the
+// ApiKeys table + ApprovedApiKeyIds column are dropped by the RetireInboundApiKeyStore
+// migration.
 
 public class ApiMethodConfiguration : IEntityTypeConfiguration<ApiMethod>
 {
@@ -43,9 +25,6 @@ public class ApiMethodConfiguration : IEntityTypeConfiguration<ApiMethod>
         builder.Property(m => m.Script)
             .IsRequired();
 
-        builder.Property(m => m.ApprovedApiKeyIds)
-            .HasMaxLength(4000);
-
         builder.Property(m => m.ParameterDefinitions)
             .HasMaxLength(4000);