chore(host): pin ZB.MOM.WW.Auth 0.3.0 + ApiKeys.SqlServer; InboundApiKeyStoreOptions (Provider Sqlite|SqlServer, ReadProvider fails the boot on an unknown value)

Claude-Session: https://claude.ai/code/session_013L3XdmVii9i5sY4FChU8pB

src/ZB.MOM.WW.ScadaBridge.Host/InboundApiKeyStoreOptions.cs

@@ -0,0 +1,36 @@
+using Microsoft.Extensions.Configuration;
+
+namespace ZB.MOM.WW.ScadaBridge.Host;
+
+/// <summary>Which backend holds inbound API keys. Bound from <c>ScadaBridge:InboundApi:ApiKeyStore</c> alongside the library's own <c>ApiKeyOptions</c>.</summary>
+public enum InboundApiKeyStoreProvider { Sqlite, SqlServer }
+
+/// <summary>Host-side selector for the inbound API key store. <c>Sqlite</c> is per-node (single-node installs); <c>SqlServer</c> shares one row set across a central pair (design 2026-09-02).</summary>
+public sealed class InboundApiKeyStoreOptions
+{
+    public const string SectionPath = "ScadaBridge:InboundApi:ApiKeyStore";
+
+    public InboundApiKeyStoreProvider Provider { get; set; } = InboundApiKeyStoreProvider.Sqlite;
+
+    /// <summary>SQLite file to import once when <see cref="Provider"/> is SqlServer; defaults to the library's <c>SqlitePath</c>. Renamed <c>*.imported</c> afterwards.</summary>
+    public string? ImportFromSqlitePath { get; set; }
+
+    /// <summary>Reads <c>Provider</c> from configuration (case-insensitive). Throws <see cref="InvalidOperationException"/> naming the legal values on an unknown one, so a typo fails the boot with a readable message instead of silently falling back to SQLite.</summary>
+    public static InboundApiKeyStoreProvider ReadProvider(IConfiguration configuration)
+    {
+        var value = configuration[$"{SectionPath}:Provider"];
+        if (string.IsNullOrWhiteSpace(value))
+        {
+            return InboundApiKeyStoreProvider.Sqlite;
+        }
+
+        if (Enum.TryParse<InboundApiKeyStoreProvider>(value, ignoreCase: true, out var parsed)
+            && Enum.IsDefined(parsed))
+        {
+            return parsed;
+        }
+
+        throw new InvalidOperationException(
+            $"{SectionPath}:Provider '{value}' is not recognised; use 'Sqlite' or 'SqlServer'.");
+    }
+}

src/ZB.MOM.WW.ScadaBridge.Host/ZB.MOM.WW.ScadaBridge.Host.csproj

@@ -32,6 +32,7 @@
     <PackageReference Include="ZB.MOM.WW.Health" />
     <PackageReference Include="ZB.MOM.WW.Health.Akka" />
     <PackageReference Include="ZB.MOM.WW.Health.EntityFrameworkCore" />
+    <PackageReference Include="ZB.MOM.WW.Auth.ApiKeys.SqlServer" />
     <PackageReference Include="ZB.MOM.WW.Telemetry" />
     <PackageReference Include="ZB.MOM.WW.Telemetry.Serilog" />
     <!-- Host/App.razor uses the kit's <ThemeHead/>/<ThemeScripts/> directly; declare the