Record Phase 1 key setup and board-only key minting (AUD-53)

Co-Authored-By: Paperclip <noreply@paperclip.ing>

docs/outline/02-config-and-env.md

@@ -12,7 +12,7 @@ Relevant keys:
 | Key | Use |
 |---|---|
 | `OMNIROUTE_API_KEY` | Model calls through OmniRoute. |
-| `PAPERCLIP_API_KEY` | File jobs to Paperclip. Does not exist yet. |
+| `PAPERCLIP_API_KEY` | File jobs to Paperclip. The `Hub` agent holds this key (id `108c6220-c9e1-4b62-9e0a-6a763e0d28fd`). Key name: `hub-service`. |
 | `TAVILY_API_KEY` | Web search. |
 | `OL_API_KEY` | Outline docs. |
 | `VIKUNJA_TOKEN` | Vikunja tasks. |

docs/outline/04-agent-runbook.md

@@ -9,10 +9,16 @@ result that returns.
 
 ### Steps
 
-1. Create a Paperclip agent API key for this project.
+1. Create a Paperclip agent API key for this project. **DONE.**
    - Paperclip board: `http://192.168.20.13:3100`.
-   - Store the key in `~/.config/environment.d/10-secrets.conf` as
+   - Agent: `Hub`, id `108c6220-c9e1-4b62-9e0a-6a763e0d28fd`.
+   - Key name: `hub-service`.
+   - The key is stored in `/home/sam/.config/environment.d/10-secrets.conf` as
      `PAPERCLIP_API_KEY`. Never commit it.
+   - Verification: `GET /api/agents/me` with the key returns `200` and the name
+     `Hub`.
+   - Note: `POST /api/agents/{id}/keys` is **board-only**. A run JWT gets
+     `403 Board access required`. Mint keys with the local board key.
 2. File one job with `curl`. Use the issue-create endpoint.
 3. Confirm the job appears in the Paperclip board.
 4. Wait for the agent to close the job.