Fix ci workflow missing cryptography and run full pytest

The api CI job was hard-coding a subset of pip packages and only running
two test files. After provider-key encryption landed in security.py, the
test_user_auth_cache and test_provider_and_extraction_parsing tests
import cryptography via api.services.security and the install step no
longer provided it, causing collection errors and a red workflow on
every recent push.

Use requirements.txt as the install source of truth and run the full
pytest suite under api/ so future tests can't silently miss deps.

Author: Codex

.github/workflows/ci.yml

@@ -13,8 +13,8 @@ jobs:
         with:
           python-version: "3.11"
       - run: python -m compileall api
-      - run: python -m pip install asyncpg==0.29.0 pydantic==2.7.0 pydantic-settings==2.3.0 httpx==0.27.0 pytest==8.2.2
-      - run: python -m pytest api/test_user_auth_cache.py api/test_provider_and_extraction_parsing.py
+      - run: python -m pip install -r api/requirements.txt
+      - run: python -m pytest api
 
   mcp:
     runs-on: ubuntu-latest