feat(auth): add admin-managed bot API keys with expiry and revocation

app/core/auth.py

@@ -26,6 +26,7 @@ class AuthContext:
     permission: Permission
     user_id: str | None = None
     token_id: str | None = None
+    bot_principal_id: str | None = None
     token_source: str = "env"
 
 def get_auth_repository(settings: Settings = Depends(get_settings)) -> Generator[PortfolioRepository, None, None]:
@@ -63,6 +64,7 @@ def _resolve_auth_context(token: str, settings: Settings, repository: PortfolioR
         permission=Permission(principal.permission),
         user_id=principal.user_id,
         token_id=principal.token_id,
+        bot_principal_id=principal.bot_principal_id,
         token_source="db",
     )