chore: bump Backend + Cli (project.create gate trifecta)

* HarborForge.Backend 01f6b56 → HEAD
  fix(projects): perm-gate create + apikey-via-Bearer + introspect with apikey.
  - POST /projects checks project.create perm (was hardcoded is_admin)
  - /auth/me/permissions accepts API key (was JWT-only → broke hf-cli local gate)
  - get_current_user_or_apikey falls back to API-key lookup when Authorization:
    Bearer fails JWT decode (hf-cli only emits Bearer headers)
  - init_bootstrap seeds project.create perm + assigns to mgr role
* HarborForge.Cli      a42ba6f
  fix(cli): gate `hf project create` on project.create (was project.write).

prod e2e verified: nav (mgr) /auth/me/permissions returns 26 perms
including project.create; POST /projects with nav API key returns 201.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
h z
2026-05-24 22:10:49 +01:00
parent 52de061570
commit 836bc17fd3
2 changed files with 2 additions and 2 deletions