feat: add optional JSON API with Bearer token authentication

Expose read/write JSON endpoints for dashboards and integrations when
`vantage.api.enabled` is true, separate from the Blade dashboard Gate.

Author: houdaslassi

config/vantage.php

@@ -108,6 +108,28 @@
     'routes' => env('VANTAGE_ROUTES', true),
     'route_prefix' => env('VANTAGE_ROUTE_PREFIX', 'vantage'),
 
+    /*
+    |--------------------------------------------------------------------------
+    | REST / JSON API
+    |--------------------------------------------------------------------------
+    |
+    | Expose a JSON API for external consumption (dashboards, CLI tools, etc.).
+    | The API is independent of the web dashboard and uses Bearer-token auth
+    | instead of the Gate/session-based auth used by the Blade views.
+    |
+    | Set `api.token` to a strong random string and pass it as:
+    |   Authorization: Bearer <token>
+    |
+    | If the token contains =, +, #, or spaces, wrap the value in double quotes
+    | in your .env file (e.g. VANTAGE_API_TOKEN="...") so it is not truncated.
+    |
+    */
+    'api' => [
+        'enabled' => env('VANTAGE_API_ENABLED', false),
+        'token' => env('VANTAGE_API_TOKEN'),
+        'prefix' => env('VANTAGE_API_PREFIX', 'api/vantage'),
+    ],
+
     /*
     |--------------------------------------------------------------------------
     | Performance Telemetry

routes/api.php

@@ -0,0 +1,20 @@
+<?php
+
+use Illuminate\Support\Facades\Route;
+use Storvia\Vantage\Http\Controllers\VantageApiController;
+use Storvia\Vantage\Http\Middleware\AuthorizeVantageApi;
+
+$prefix = trim(config('vantage.api.prefix', 'api/vantage'), '/');
+$prefix = $prefix === '' ? 'api/vantage' : $prefix;
+
+Route::prefix($prefix)->name('vantage.api.')->middleware(AuthorizeVantageApi::class)->group(function () {
+    Route::get('/', [VantageApiController::class, 'index'])->name('index');
+    Route::get('/stats', [VantageApiController::class, 'stats'])->name('stats');
+    Route::get('/jobs', [VantageApiController::class, 'jobs'])->name('jobs');
+    Route::get('/jobs/{id}', [VantageApiController::class, 'show'])->name('jobs.show');
+    Route::get('/tags', [VantageApiController::class, 'tags'])->name('tags');
+    Route::get('/failed', [VantageApiController::class, 'failed'])->name('failed');
+    Route::post('/jobs/{id}/retry', [VantageApiController::class, 'retry'])->name('jobs.retry');
+    Route::get('/queue-depths', [VantageApiController::class, 'queueDepths'])->name('queue-depths');
+    Route::get('/batches', [VantageApiController::class, 'batches'])->name('batches');
+});