feat: add Copy cURL Command button to the Local API page (#30)

Adds a one-tap way to get a working, authenticated request from the Local
API settings page. copyCurlCommand() copies a curl invocation using the
current bound address and token via the Authorization header:

  curl -H "Authorization: Bearer <token>" http://127.0.0.1:<port>/portfolio

Keeps the token in a header rather than a query string, so it stays out of
URLs, browser history, and the request-log view (which masks the token).
Guards on an empty token, matching copyToken().

1 files changed, 5 insertions, 0 deletions

diff --git a/LocalAPIService.swift b/LocalAPIService.swift
index cd12fb8..0a5f8a2 100644
--- a/LocalAPIService.swift
+++ b/LocalAPIService.swift
@@ -142,6 +142,11 @@ final class LocalAPIService {
         AppClipboard.copy(config.token)
     }
 
+    func copyCurlCommand() {
+        guard !config.token.isEmpty else { return }
+        AppClipboard.copy("curl -H \"Authorization: Bearer \(config.token)\" \(address)/portfolio")
+    }
+
     func localSecretReferences() -> [String] {
         [LocalAPISecretStore.reference]
     }