feat(auth): owner-bound bot tokens and self-service bot management

app/schemas/auth.py

@@ -67,7 +67,30 @@ class IssuedClientTokenResponse(BaseModel):
 
 class CreateBotPrincipalRequest(BaseModel):
     name: str = Field(min_length=1)
-    permission: Literal["read", "trade-write", "admin"]
+    owner_user_id: str = Field(min_length=1)
+    permission: Literal["read", "trade-write"]
+    description: str | None = None
+
+    @field_validator("name")
+    @classmethod
+    def normalize_bot_name(cls, value: str) -> str:
+        normalized = value.strip()
+        if not normalized:
+            raise ValueError("name은 비어 있을 수 없습니다")
+        return normalized
+
+    @field_validator("owner_user_id")
+    @classmethod
+    def normalize_owner_user_id(cls, value: str) -> str:
+        normalized = value.strip()
+        if not normalized:
+            raise ValueError("owner_user_id는 비어 있을 수 없습니다")
+        return normalized
+
+
+class CreateSelfBotPrincipalRequest(BaseModel):
+    name: str = Field(min_length=1)
+    permission: Literal["read", "trade-write"]
     description: str | None = None
 
     @field_validator("name")
@@ -82,7 +105,8 @@ class CreateBotPrincipalRequest(BaseModel):
 class BotPrincipalResponse(BaseModel):
     id: str
     name: str
-    permission: Literal["read", "trade-write", "admin"]
+    owner_user_id: str
+    permission: Literal["read", "trade-write"]
     description: str | None = None
     is_active: bool
     created_at: datetime | None = None
@@ -92,7 +116,7 @@ class BotPrincipalResponse(BaseModel):
 
 class CreateBotTokenRequest(BaseModel):
     name: str = Field(min_length=1)
-    permission: Literal["read", "trade-write", "admin"] | None = None
+    permission: Literal["read", "trade-write"] | None = None
     expires_in_days: int | None = Field(default=None, ge=1, le=3650)
 
     @field_validator("name")