bcec7e6934
- authHeaders now reads HWLAB_API_KEY (env or --apiKey/--bearerToken) first; only when hwl_live_ prefix is present - when both are set, HWLAB_API_KEY wins and x-hwlab-device-pod-api-key is suppressed - new test asserts the precedence using a fake API key against a local http server - help auth hint updated to mention the preferred credential