Add public API v1 with API key auth, rate limiting, and docs page

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

app/Providers/AppServiceProvider.php

@@ -4,7 +4,10 @@ namespace App\Providers;
 
 use App\Models\UserGame;
 use App\Policies\UserGamePolicy;
+use Illuminate\Cache\RateLimiting\Limit;
+use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Gate;
+use Illuminate\Support\Facades\RateLimiter;
 use Illuminate\Support\ServiceProvider;
 
 class AppServiceProvider extends ServiceProvider
@@ -26,5 +29,13 @@ class AppServiceProvider extends ServiceProvider
         Gate::policy(\App\Models\Review::class, \App\Policies\ReviewPolicy::class);
         Gate::policy(\App\Models\UserList::class, \App\Policies\ListPolicy::class);
         Gate::policy(\App\Models\GameComment::class, \App\Policies\GameCommentPolicy::class);
+        Gate::policy(\App\Models\ApiKey::class, \App\Policies\ApiKeyPolicy::class);
+
+        RateLimiter::for('api', function (Request $request) {
+            $key = $request->bearerToken() ?? $request->get('api_key') ?? $request->ip();
+            return Limit::perMinute(60)->by($key)->response(function () {
+                return response()->json(['error' => 'Too many requests. Limit: 60/min.'], 429);
+            });
+        });
     }
 }