ApiKeyLookup

Resolves a raw API key to ApiKeyDetails carrying the caller's own identity.

Returns the ApiKeyDetails to attach on success, or null when the key is unknown. Must return null for unknown keys rather than throw. Storage and comparison — including hashing and constant-time equality — are the caller's responsibility. Register via the apiKey { } block (lookup).