fix: prioritize long-term API Key and consistently forward site UUID in route proxy

src/app/api/[...route]/route.ts

@@ -41,15 +41,16 @@ async function handleProxy(req: NextRequest, { params }: { params: Promise<{ rou
     headers.set('Content-Type', 'application/json');
     
     if (routeArray[0] !== 'auth' && routeArray[0] !== 'dashboard') {
+      const apiKey = process.env.BACKONE_API_KEY || process.env.NETIFY_API_KEY;
       const jwtToken = process.env.BACKONE_JWT_TOKEN || process.env.NETIFY_JWT_TOKEN;
       const siteUuid = process.env.BACKONE_SITE_UUID || process.env.NETIFY_SITE_UUID;
-      const apiKey = process.env.BACKONE_API_KEY || process.env.NETIFY_API_KEY;
 
-      if (jwtToken && siteUuid) {
-        headers.set('x-api-key', jwtToken);
+      const apiToken = apiKey || jwtToken;
+      if (apiToken) {
+        headers.set('x-api-key', apiToken);
+      }
+      if (siteUuid) {
         headers.set('x-net-site', siteUuid);
-      } else if (apiKey) {
-        headers.set('x-api-key', apiKey);
       }
     } else {
       // For local auth/dashboard routes, pass along the cookie for authentication