Integrate API-key auth middleware

[gorkem-bwl]

Build an Express middleware that checks incoming requests for a valid LangRoute API key, rejects unauthorized calls.

• Middleware reads Authorization: Bearer header
• Validates against Postgres table api_keys
• Returns 401 if missing or invalid
• Applied globally to the chat route