Details (original message): Add the API key login gate and credential-aware API/SSE client (owner-scoped multi-user)