fix(vmm): align admin token header with gateway

Author: kvinwang

dstack/crates/api-auth/README.md

@@ -11,8 +11,7 @@ Shared authentication primitives for dstack HTTP and RPC administration APIs.
 HTTP integrations support:
 
 - `Authorization: Bearer <token>`;
-- a service-specific token header (`X-Admin-Token` for Gateway and
-  `X-API-Token` for VMM);
+- the shared `X-Admin-Token` header used by Gateway and VMM;
 - `Authorization: Basic ...` backed by a bcrypt Apache htpasswd file;
 - optional GET-only `?token=` links for the Gateway and VMM dashboards.
 

dstack/vmm/src/main.rs

@@ -91,7 +91,7 @@ async fn run_external_api(app: App, figment: Figment, api_auth: Authenticator) -
             api_auth,
             HttpAuthConfig {
                 realm: "dstack-vmm API".into(),
-                token_header: Some("X-API-Token".into()),
+                token_header: Some("X-Admin-Token".into()),
                 allow_get_query_token: true,
             },
         ))