feat: validate API auth type field with enum instead of bare string

Problem

In `src/types/config.ts`, the API auth schema uses a bare string for the `type` field:

```ts
const apiAuthSchema = z.object({
type: z.string(), // no validation
header: z.string(),
placeholder: z.string().optional(),
})
```

Typos like `apikey` instead of `apiKey`, or `bearer-token` instead of `bearer`, only fail at runtime when the playground tries to construct auth headers.

Suggested Fix

```ts
const apiAuthSchema = z.object({
type: z.enum(['apiKey', 'bearer', 'basic']),
header: z.string(),
placeholder: z.string().optional(),
})
```

Start in src/types/config.ts and inspect apiAuthSchema, including how its type field is consumed. Done means the schema accepts apiKey, bearer, and basic while rejecting other values; check the surrounding configuration validation or existing schema tests if present.