#703 Test

Summary by cubic

Enforces expires_at for x-api-key auth and centralizes agent workflow input building so interactive and headless chat paths stay consistent. Backward-compatible for existing non-expiring keys.

• New Features

  • getApiKeyAccountId rejects expired account keys using isApiKeyExpired (supports chat#1813).
  • Adds account_api_keys.expires_at to types/database.types.

• Refactors

  • Adds buildRunAgentInput and updates handleChatWorkflowStream to use it, deriving repo IDs and org ID from clone_url in one place.