feat(auth)!: ScadaBridge retire SQL Server ApiKey entity + ApprovedApiKeyIds + legacy hashing; EF migration RetireInboundApiKeyStore; re-issue runbook + CHANGELOG (re-arch C5/E) — BREAKING: X-API-Key -> Bearer sbk_, keys re-issued

tests/ZB.MOM.WW.ScadaBridge.ConfigurationDatabase.Tests/UnitTest1.cs

@@ -56,7 +56,8 @@ public class DbContextTests : IDisposable
         Assert.NotNull(_context.SharedScripts);
         Assert.NotNull(_context.LdapGroupMappings);
         Assert.NotNull(_context.SiteScopeRules);
-        Assert.NotNull(_context.ApiKeys);
+        // Auth re-arch (C5): the ApiKeys DbSet was retired (inbound keys moved to the
+        // shared ZB.MOM.WW.Auth.ApiKeys SQLite store); only ApiMethods remains.
         Assert.NotNull(_context.ApiMethods);
         Assert.NotNull(_context.AuditLogEntries);
 
@@ -264,16 +265,16 @@ public class DbContextTests : IDisposable
     }
 
     [Fact]
-    public void InboundApi_ApiKeyAndMethod()
+    public void InboundApi_Method()
     {
-        var key = new ApiKey("TestKey", "sk-test-123") { IsEnabled = true };
+        // Auth re-arch (C5): the SQL Server ApiKey entity was retired (inbound keys
+        // now live in the shared ZB.MOM.WW.Auth.ApiKeys SQLite store), so this case
+        // covers only the surviving ApiMethod catalogue.
         var method = new ApiMethod("GetStatus", "return \"ok\";") { TimeoutSeconds = 30 };
 
-        _context.ApiKeys.Add(key);
         _context.ApiMethods.Add(method);
         _context.SaveChanges();
 
-        Assert.Single(_context.ApiKeys.Where(k => k.Name == "TestKey"));
         Assert.Single(_context.ApiMethods.Where(m => m.Name == "GetStatus"));
     }