fix: Terminal Auth per JWT-Token statt leerem API-Key

- TerminalModal nutzt jetzt JWT aus localStorage (api.getToken()) fuer WS-Auth
- Backend Middleware: ?token= Query-Parameter fuer WebSocket JWT-Auth
- Behebt: api_key= leer -> 401 -> Terminal nicht erreichbar

frontend/src/components/TerminalModal.jsx

@@ -4,6 +4,7 @@ import { FitAddon } from '@xterm/addon-fit'
 import '@xterm/xterm/css/xterm.css'
 import { useSettingsStore } from '../stores/settings'
 import { API_KEY } from '../config'
+import api from '../api/client'
 
 export default function TerminalModal({ agentId, agentName, onClose }) {
   const termRef = useRef(null)
@@ -13,6 +14,8 @@ export default function TerminalModal({ agentId, agentName, onClose }) {
   const [status, setStatus] = useState('connecting') // connecting | open | error | closed
 
   const backendHost = useSettingsStore.getState().getBackendHost()
+  // JWT-Token bevorzugen (Browser ist per Login authentifiziert), API-Key als Fallback
+  const jwtToken = api.getToken()
   const apiKey = API_KEY
 
   useEffect(() => {
@@ -58,7 +61,13 @@ export default function TerminalModal({ agentId, agentName, onClose }) {
     const cols = term.cols || 220
     const rows = term.rows || 50
     const wsProtocol = window.location.protocol === 'https:' ? 'wss:' : 'ws:'
-    const wsUrl = `${wsProtocol}//${window.location.host}/api/v1/agents/${agentId}/terminal?cols=${cols}&rows=${rows}&api_key=${apiKey}`
+    // JWT bevorzugen, API-Key als Fallback (API-Key nur wenn konfiguriert)
+    const authParam = jwtToken
+      ? `token=${encodeURIComponent(jwtToken)}`
+      : apiKey
+        ? `api_key=${encodeURIComponent(apiKey)}`
+        : ''
+    const wsUrl = `${wsProtocol}//${window.location.host}/api/v1/agents/${agentId}/terminal?cols=${cols}&rows=${rows}&${authParam}`
 
     const ws = new WebSocket(wsUrl)
     ws.binaryType = 'arraybuffer'