fix: clear portainer-api-key cookie during session bootstrap

Portainer sets its own 'portainer-api-key' cookie when a user creates an
API key.  If this cookie exists with an expired or invalid key, Portainer
prefers it over our JWT token and auto-login fails.

Clear it alongside portainer_jwt and portainer.JWT during session bootstrap.

Author: zhaojing1987

apphub/src/services/integration_session_bridge.py

@@ -231,6 +231,9 @@ def bootstrap_portainer(self) -> list[dict[str, object]]:
                 # carry an old unscoped portainer_jwt cookie may send it
                 # alongside the new one, causing the gateway to pick up
                 # a stale JWT.
+                # portainer-api-key is set by Portainer itself when a user
+                # creates an API key — an expired or invalid key in this
+                # cookie takes precedence over our JWT and breaks auto-login.
                 {
                     "name": "portainer_jwt",
                     "value": "",
@@ -244,6 +247,12 @@ def bootstrap_portainer(self) -> list[dict[str, object]]:
                     "path": "/",
                     "max_age": 0,
                 },
+                {
+                    "name": "portainer-api-key",
+                    "value": "",
+                    "path": "/",
+                    "max_age": 0,
+                },
             ]
         except CustomException:
             raise