feat(auth): add admin-managed bot API keys with expiry and revocation

app/domain/models.py

@@ -37,6 +37,7 @@ class AuthToken:
     token_prefix: str
     permission: str
     token_type: str
+    bot_principal_id: str | None = None
     expires_at: datetime | None = None
     last_used_at: datetime | None = None
     revoked_at: datetime | None = None
@@ -49,6 +50,19 @@ class TokenPrincipal:
     user_id: str
     permission: str
     token_type: str
+    bot_principal_id: str | None = None
+
+
+@dataclass
+class BotPrincipal:
+    id: str
+    owner_user_id: str
+    name: str
+    description: str | None = None
+    is_active: bool = True
+    created_at: datetime | None = None
+    updated_at: datetime | None = None
+    deactivated_at: datetime | None = None
 
 
 @dataclass