feat: enable LiteLLM API key authentication

Re-enabled LITELLM_MASTER_KEY for proper API key authentication.
LiteLLM supports master key without database for simple auth scenarios.

- LiteLLM validates Bearer token against master key
- Open WebUI uses same key for internal communication
- External access requires both HTTP Basic Auth + API key

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

ai/compose.yaml

@@ -35,7 +35,7 @@ services:
 
       # OpenAI API configuration (pointing to LiteLLM proxy)
       OPENAI_API_BASE_URLS: http://litellm:4000
-      OPENAI_API_KEYS: sk-internal
+      OPENAI_API_KEYS: ${AI_LITELLM_API_KEY}
 
       # WebUI configuration
       WEBUI_NAME: ${AI_WEBUI_NAME:-Pivoine AI}
@@ -95,6 +95,7 @@ services:
     environment:
       TZ: ${TIMEZONE:-Europe/Berlin}
       ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY}
+      LITELLM_MASTER_KEY: ${AI_LITELLM_API_KEY}
       DATABASE_URL: null
     volumes:
       - ./litellm-config.yaml:/app/litellm-config.yaml:ro