feat: add ai gateway local core flow

apps/api/internal/auth/auth.go

@@ -52,6 +52,7 @@ type Authenticator struct {
 	ServerMainBaseURL       string
 	ServerMainInternalToken string
 	HTTPClient              *http.Client
+	LocalAPIKeyVerifier     func(ctx context.Context, apiKey string) (*User, error)
 }
 
 func New(jwtSecret string, serverMainBaseURL string, internalToken string) *Authenticator {
@@ -169,6 +170,18 @@ func (a *Authenticator) SignJWT(user *User, ttl time.Duration) (string, error) {
 }
 
 func (a *Authenticator) verifyAPIKey(ctx context.Context, apiKey string) (*User, error) {
+	if a.LocalAPIKeyVerifier != nil {
+		user, err := a.LocalAPIKeyVerifier(ctx, apiKey)
+		if err == nil {
+			return user, nil
+		}
+		if !errors.Is(err, ErrUnauthorized) {
+			return nil, err
+		}
+		if strings.HasPrefix(apiKey, "sk-gw-") {
+			return nil, ErrUnauthorized
+		}
+	}
 	if a.ServerMainBaseURL == "" || a.ServerMainInternalToken == "" {
 		return nil, ErrUnauthorized
 	}