release: v2.0.2

Release the changes on `dev` as v2.0.2: authenticated MeshMapper imports and the traffic-sorted observer directory, including rolling seven-day counts from available history. Bump the API version and regenerate Swagger.

MeshMapper integration requires an API key. Regional admins’ existing per-region or grouped-region coverage keys also work for these APIs. Deployments should set `MESHMAPPER_API_KEY` and restart Beacon.

Validation: `go build ./...`, `gofmt -l .` (empty), `go vet ./...`, `go test ./...`, `govulncheck ./...`, and race tests for MeshMapper and scopestore passed in a clean checkout. PostgreSQL integration tests require CI because Docker is unavailable locally.

env.example

@@ -10,6 +10,12 @@ LISTEN_ADDR=:8080
 # If set, overrides auth.api_key (even when empty).
 # BEACON_API_KEY=
 
+# Regional or grouped-region API key generated by your local MeshMapper admin.
+# A grouped-region key covers multiple regions. Never use the mobile App key.
+# Overrides meshmapper.api_key, even when empty. Required for enabled imports.
+# Keep this in the deployment environment when using saved-config backups.
+# MESHMAPPER_API_KEY=
+
 # Optional application logging overrides (defaults: info / text).
 # LOG_LEVEL=info
 # LOG_FORMAT=json