feat(api): one API for curl and MCP, REST reads with keys, origin badge with key name

API keys reach tasks and lists over plain REST too (GET /task-lists, GET /tasks with
status/due filters, PATCH/DELETE /thoughts/{id}, GET /lists, list items), guarded by a route
table; notes and settings stay closed. Rights hold for every access alike (webhook:task also
allows create_task over MCP, tasks:write also task delivery).

Tasks, thoughts and list items record which key created them and which one changed them last
(migration 13 replaces agent_mark; origin stays after the user's own edits and survives the
triage into a list item). OriginBadge shows the key name with a webhook or robot icon, details
on hover and tap, and replaces the Webhook and KI badges everywhere, now also on list items.

Settings: category "API" with rights grouped by tasks, lists and inbox and two tabs
(curl / smart home with a Home Assistant sensor, AI agents over MCP). Docs, help, README and
changelog updated; v0.30.0.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

frontend/src/features/triage/TaskDetailModal.tsx

@@ -11,7 +11,6 @@ import {
   AlertTriangle,
   Flame,
   Folder,
-  Webhook,
   Lock,
   UserPlus,
   Repeat,
@@ -20,7 +19,7 @@ import {
 } from 'lucide-react';
 import { Thought, TaskList, TaskListMember, KanbanColumn, User, Recurrence } from '../../lib/types';
 import { UserAvatar } from '../../components/UserAvatar';
-import { AgentBadge } from '../../components/AgentBadge';
+import { OriginBadge, originDetails } from '../../components/OriginBadge';
 import { UserAutocomplete } from '../UserAutocomplete';
 import { api, triggerHaptic } from '../../lib/api';
 import { MarkdownViewer } from '../../lib/markdown';
@@ -239,13 +238,7 @@ const TaskDetailModalContent: React.FC<TaskDetailModalProps & { task: Thought }>
                 <span>Nur Lesen</span>
               </span>
             )}
-            {task.source?.toLowerCase() === 'webhook' && (
-              <span className="px-1.5 py-0.5 border border-border bg-canvas text-muted rounded-btn text-[10px] font-medium flex items-center gap-1 flex-shrink-0">
-                <Webhook className="w-2.5 h-2.5 text-accent" />
-                <span>Webhook</span>
-              </span>
-            )}
-            <AgentBadge mark={task.agentMark} />
+            <OriginBadge origin={task.origin} createdAt={task.createdAt} />
           </div>
 
           <div className="flex items-center gap-1.5">
@@ -895,8 +888,8 @@ const TaskDetailModalContent: React.FC<TaskDetailModalProps & { task: Thought }>
 
         {/* Modal Footer */}
         <div className="flex items-center justify-between px-4 py-2.5 border-t border-border bg-panel">
-          <div className="text-[11px] text-faint">
-            Erstellt: {new Date(task.createdAt).toLocaleDateString('de-DE')}
+          <div className="text-[11px] text-faint min-w-0 pr-3">
+            {originDetails(task.origin, task.createdAt) || `Erstellt: ${new Date(task.createdAt).toLocaleDateString('de-DE')}`}
           </div>
           <button
             type="button"