API: Phoenix railing proxy, API key auth for /api/v1/*, schema export, docs, migrations, tests

- Phoenix API Railing: proxy to PHOENIX_RAILING_URL, tenant me routes
- Tenant-auth: X-API-Key support for /api/v1/* (api_keys table)
- Migration 026: api_keys table; 025 sovereign stack marketplace
- GET /graphql/schema, GET /graphql-playground, api/docs OpenAPI
- Integration tests: phoenix-railing.test.ts
- docs/api/API_VERSIONING: /api/v1/ railing alignment
- docs/phoenix/PORTAL_RAILING_WIRING

Made-with: Cursor

api/src/db/migrations/index.ts

@@ -17,4 +17,13 @@ export { up as up013, down as down013 } from './013_mfa_and_rbac.js'
 export { up as up014, down as down014 } from './014_audit_logging.js'
 export { up as up015, down as down015 } from './015_incident_response_and_classification.js'
 export { up as up016, down as down016 } from './016_resource_sharing.js'
-
+export { up as up017, down as down017 } from './017_marketplace_catalog.js'
+export { up as up018, down as down018 } from './018_templates.js'
+export { up as up019, down as down019 } from './019_deployments.js'
+export { up as up020, down as down020 } from './020_blockchain_networks.js'
+export { up as up021, down as down021 } from './021_workflows.js'
+export { up as up022, down as down022 } from './022_pop_mappings_and_federation.js'
+export { up as up023, down as down023 } from './023_industry_controls_and_waf.js'
+export { up as up024, down as down024 } from './024_compliance_audit.js'
+export { up as up025, down as down025 } from './025_sovereign_stack_marketplace.js'
+export { up as up026, down as down026 } from './026_api_keys.js'