Phase 8: Identity - Project + API Key Management

parent issue #21 


## Objective

Add Project + API Key Management for project key management layer


## Tasks

- [ ] `POST /projects` → create project + generate API key
- [ ] Middleware validates `X-API-Key` on all requests
- [ ] Scope all queries to `project_id`