v2.2.0: API Key鉴权(可配置) + Function Calling透传 + MCP Server标准接口

- API Key鉴权: /v1/* 与 /mcp 接口支持 Bearer 鉴权(OpenAI兼容), 系统配置页可启停/增删Key
  (GET/PUT /api/admin/apikeys, key脱敏显示; /health /status 不受限; 内部自调用自动带key)
- Function Calling: tools/tool_calls 全透传上游, 实测 GLM-5.3-flash 返回 tool_calls(get_weather)
- MCP Server: /mcp 端点(Streamable HTTP + SSE兼容), 暴露 text_complete/vision_complete/image_generate 工具
  (initialize/ping/tools/list/tools/call/prompts.list/resources.list; 实测生图返回图片URL)
- 默认生成 API Key: sk-hz4th-<hex>

data/config.json

@@ -224,5 +224,11 @@
   "routing_config": {
     "prefer_cache_model": true,
     "cache_ttl_seconds": 3600
+  },
+  "api_auth": {
+    "enabled": true,
+    "keys": [
+      "sk-hz4th-2cc2656c1cb78891838557af0fed19c0"
+    ]
   }
 }