use pangolin-key prefix for virtual api keys

server/auth/verifyVirtualApiKey.ts

@@ -62,11 +62,6 @@ function parseVkCredential(
     };
 }
 
-/**
- * Extract a virtual API key credential from provider-style auth headers.
- * Checks Authorization Bearer / Splunk, x-api-key, x-goog-api-key, and
- * cf-aig-authorization. First matching vk-{id}.{secret} wins.
- */
 export function extractVirtualApiKeyCredential(
     headers: Record<string, string> | undefined
 ): VirtualApiKeyCredential | null {

src/lib/virtualApiKeyFormat.ts

@@ -1,4 +1,4 @@
-export const VIRTUAL_API_KEY_PREFIX = "vk-";
+export const VIRTUAL_API_KEY_PREFIX = "pangolin-key-";
 
 const VIRTUAL_API_KEY_AUTH_HEADER_NAMES = [
     "authorization",