feat(api): one API for curl and MCP, REST reads with keys, origin badge with key name

API keys reach tasks and lists over plain REST too (GET /task-lists, GET /tasks with
status/due filters, PATCH/DELETE /thoughts/{id}, GET /lists, list items), guarded by a route
table; notes and settings stay closed. Rights hold for every access alike (webhook:task also
allows create_task over MCP, tasks:write also task delivery).

Tasks, thoughts and list items record which key created them and which one changed them last
(migration 13 replaces agent_mark; origin stays after the user's own edits and survives the
triage into a list item). OriginBadge shows the key name with a webhook or robot icon, details
on hover and tap, and replaces the Webhook and KI badges everywhere, now also on list items.

Settings: category "API" with rights grouped by tasks, lists and inbox and two tabs
(curl / smart home with a Home Assistant sensor, AI agents over MCP). Docs, help, README and
changelog updated; v0.30.0.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

frontend/src/features/settings/UserSettingsView.tsx

@@ -583,7 +583,7 @@ export const UserSettingsView: React.FC<UserSettingsViewProps> = ({
           <div>
             <h1 className="text-base font-bold text-main tracking-tight">Kontoeinstellungen</h1>
             <p className="text-xs text-muted">
-              Persönliches Profil, Design-Themes, Aufgaben-Alarme, Webhooks, KI-Agenten, Export & Import
+              Persönliches Profil, Design-Themes, Aufgaben-Alarme, API, Export & Import
             </p>
           </div>
         </div>
@@ -652,8 +652,8 @@ export const UserSettingsView: React.FC<UserSettingsViewProps> = ({
           >
             <Key className="w-4 h-4 text-accent flex-shrink-0" />
             <div>
-              <p className="font-semibold">Webhooks & KI-Agenten</p>
-              <p className="text-[10px] text-faint">API-Keys, MCP & Curl</p>
+              <p className="font-semibold">API</p>
+              <p className="text-[10px] text-faint">Schlüssel, curl, Smart Home & KI-Agenten</p>
             </div>
           </button>
 
@@ -1865,15 +1865,15 @@ export const UserSettingsView: React.FC<UserSettingsViewProps> = ({
           )}
 
           {/* ================================================================= */}
-          {/* SECTION 4: PRIVATE WEBHOOKS & AI AGENTS */}
+          {/* SECTION 4: API (KEYS, CURL / SMART HOME, AI AGENTS) */}
           {/* ================================================================= */}
           {section === 'webhooks' && (
             <div className="space-y-5">
               <div className="border-b border-border pb-3">
-                <h2 className="text-sm font-bold text-main">Webhooks & KI-Agenten</h2>
+                <h2 className="text-sm font-bold text-main">API</h2>
                 <p className="text-muted mt-0.5">
-                  Erstelle persönliche API-Schlüssel, um aus Skripten, Smarthome oder Bots Aufgaben und Gedanken
-                  einzuspeisen oder KI-Agenten wie Claude Code und Codex an deine Aufgaben und Listen zu lassen.
+                  Mit persönlichen API-Schlüsseln lesen und ändern Skripte, dein Smart Home oder KI-Agenten wie Claude Code
+                  und Codex deine Aufgaben, Listen und die Inbox: per curl oder über MCP, mit denselben Rechten.
                 </p>
               </div>