fix(security): require admin auth for /metrics and stop logging the API key (SEC-07) - #1344

Open

Dumbris wants to merge 2 commits into

mainfrom

fix/protect-metrics-endpoint

Commits on Sep 22, 2026

fix(security): require admin auth for /metrics and stop logging the API key (SEC-07)

Dumbris
and
claude
committed
49ebe93

Commits on Sep 23, 2026

docs+test: document ?apikey= for /metrics, harden test cleanup (SEC-07 review)

Dumbris
and
claude
committed
29c470b