Generate or paste a secret in the UI; agent API prefers DB key over TOKEN_TRAY_SECRET env.
Agent API accepts X-Tray-Key pushes; Electron tray captures cookies and upserts accounts by email.