WeldCube Air API (chore/key-vault-rbac)