fix(core): preserve account context on key params and harden account detail fallback

- api_get/post/patch_object: stop treating params.key as account-bypass trigger\n- account detail: remove forced key usage, add list/cache fallback path\n- account detail: fix fallback bug that set load_error even when fallback record existed\n- sites detail: pretty-print cfg_json before save\n- docs: clarify key != bypass and add 403 troubleshooting notes

src/lib/ae_api/api_get_object.ts

@@ -108,7 +108,6 @@ export const get_object = async function get_object({
     const is_valid_bypass =
         bypass_val === 'bypass' ||
         bypass_val === 'Nothing to See Here' ||
-        params['key'] ||
         bypass_val === 'direct-download';
 
     if (is_valid_bypass) {