We saw how 30 AI agent projects handle authorization-93% use unscoped API keys · HackerTrans