fix: integrate hardened APT security boundary

src/bridge-auth.js

@@ -133,7 +133,7 @@ class BridgeAuth {
   authenticateRequest(request) {
     if (!request || typeof request !== 'object') return false;
     const headers = request.headers || {};
-    const secret = headers['x-apt-pairing-secret'];
+    const secret = headers['x-apt-pairing'];
     return this.authenticate({ origin: headers.origin, secret });
   }
 }