Fix of broken API Auth

[guillim]

Fix done this morning with @FelixMalfait from #8295

[greptile-apps]

PR Summary

This PR fixes API authentication for self-hosted instances by modifying the JWT payload structure and validation logic to properly handle API key tokens.

• Added type: 'API_KEY' field in JWT payload in packages/twenty-server/src/engine/core-modules/auth/services/api-key.service.ts to distinguish API tokens
• Modified user lookup logic in jwt.auth.strategy.ts to skip user validation when payload.type === 'API_KEY'
• Updated token validation in jwt.auth.strategy.ts to properly handle API keys by checking apiKey.revokedAt status
• Fixed workspace ID resolution by using payload.workspaceId ?? payload.sub for consistent workspace lookup

_{2 file(s) reviewed, 1 comment(s)
Edit PR Review Bot Settings | Greptile}

[greptile-apps]

logic: Type check could allow null values through. Consider explicit check for type === 'API_KEY' instead.

[FelixMalfait]

Great first PR! 🙌

[github-actions]

	Warnings
⚠️	Changes were made to the environment variables, but not to the documentation - Please review your changes and check if a change needs to be documented!

TODOs/FIXMEs:

• // TODO: Check why it's not working: packages/twenty-server/src/engine/core-modules/auth/strategies/jwt.auth.strategy.ts

Generated by 🚫 dangerJS against 6f948b4