chat-ui

c6eca91f - fix: restore Bearer token auth for API routes and validate ObjectId on PATCH/DELETE

fix: restore Bearer token auth for API routes and validate ObjectId on PATCH/DELETE Pass isApi=true to authenticateRequest for /api/* paths so Authorization Bearer tokens are processed (broke when Elysia auth plugin was removed). Add ObjectId.isValid() checks in DELETE and PATCH conversation handlers to return 400 instead of unhandled 500 on malformed IDs.