test: skip TestInvalidAPIKeyRejected when auth is disabled (#41)

The non-RBAC e2e pass runs the service with no CYBORGDB_SERVICE_ROOT_KEY, so
authentication is disabled and any key is accepted — making the "invalid key
must be rejected" assertion fail. Skip the test when no root key is configured
(auth off); it still runs in the RBAC pass where auth is enforced.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Author: ahellegit

test/comprehensive_test.go

@@ -65,6 +65,9 @@ func compTestIndex(t *testing.T) *cyborgdb.EncryptedIndex {
 func TestInvalidAPIKeyRejected(t *testing.T) {
 	// Catches: auth bypass, missing auth enforcement on server.
 	// A bad API key must be rejected on any mutating operation.
+	if os.Getenv("CYBORGDB_SERVICE_ROOT_KEY") == "" {
+		t.Skip("auth disabled (no CYBORGDB_SERVICE_ROOT_KEY) — the service accepts any key")
+	}
 	ctx, cancel := context.WithTimeout(context.Background(), baseTimeout)
 	defer cancel()