Fix image auth and thumbnail handling

Improve error messages and ensure unique user key names

Improve user key management with editing capabilities and validation

refactor auth storage and key format

fix: address copilot review feedback

feat(auth): 增加 admin/user 密钥角色与访问控制