Create Marketplace Route

[hayesZach]

Closes CSF-882
Refs CSF-876
Refs CSF-697

---

Note

Medium Risk
Adds a new authenticated key-management endpoint and refactors AuthMiddleware to depend on the request-scoped repository factory; mistakes in middleware ordering/context injection could break auth across routes.

Overview
Adds a versioned API router mounted at /api/v1, introducing /v1/marketplace/keys with a POST handler to create marketplace API keys.

Updates AuthMiddleware to pull repository.Factory from request context (via FactoryMiddleware) instead of being constructed with a KeyRepository, and adjusts tests accordingly. Also tightens/centralizes CSFloat-only admin-key checks via Key.IsOwnedByCSFloat() and switches Permissions.MarshalJSON to a value receiver.

^{Written by Cursor Bugbot for commit bc7cc86. This will update automatically on new commits. Configure here.}

[linear]

CSF-876 Marketplace Endpoints

CSF-697 Implement Skeleton For API Handler

CSF-882 Create Key For Marketplace

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}