ci(workflows): use api key auth in bay e2e

Disable anonymous access for Bay in CI and nightly browser E2E runs by
configuring an API key and exporting E2E_API_KEY for the test steps.

Author: w31r4

.github/workflows/ci.yml

@@ -166,7 +166,8 @@ jobs:
             port: 8001
 
           security:
-            allow_anonymous: true
+            api_key: "e2e-test-api-key"
+            allow_anonymous: false
 
           driver:
             type: docker
@@ -222,6 +223,7 @@ jobs:
         working-directory: pkgs/bay
         env:
           E2E_BAY_PORT: "8001"
+          E2E_API_KEY: "e2e-test-api-key"
         run: |
           uv run pytest \
             tests/integration/core/test_browser_skill_e2e.py::test_browser_exec_batch_failure_keeps_response_history_trace_consistent \

.github/workflows/nightly-browser-e2e.yml

@@ -46,7 +46,8 @@ jobs:
             port: 8001
 
           security:
-            allow_anonymous: true
+            api_key: "e2e-test-api-key"
+            allow_anonymous: false
 
           driver:
             type: docker
@@ -113,6 +114,7 @@ jobs:
         working-directory: pkgs/bay
         env:
           E2E_BAY_PORT: "8001"
+          E2E_API_KEY: "e2e-test-api-key"
         run: uv run pytest tests/integration -v --tb=short
 
       - name: Dump Bay logs on failure