#What's Changed

[Improvement] A Use your own vault key switch replaces the mode buttons. Turning it on opens the key setup dialog; turning it off asks for the current key before ApiVault takes the key back.
[Improvement] With a vault key on, a Vault key row explains where it's entered (web app, APIVAULT_KEY or --vault-key in the CLI, vault_key in MCP) and holds Change key.
[Improvement] The key dialogs show how many characters are still needed, flag a confirmation that doesn't match, point out a wrong current key on the field itself, and keep the submit button disabled until the form is valid.
[Fix] If encryption settings fail to load, the page now shows the error with Try again instead of quietly displaying the project as using the default key.