Add API vault files

SKILL.md

@@ -0,0 +1,67 @@
+---
+name: api-vault
+description: Look up API keys, tokens, and service credentials from the Notion APIs database via Maton CLI before asking the user. Also check existing Maton connections.
+---
+
+# API Vault
+
+## When to Use
+
+Any time you need an API key, service token, OAuth credential, or connection secret — whether for installing a skill, configuring a service, calling an API, or setting up an integration.
+
+## Lookup Priority
+
+Always follow this order. Do not skip steps.
+
+### 1. Notion APIs Database (source of truth)
+
+Tony stores every API key in his **Notion "APIs" database** titled `APIs` (Database ID: `c7c74f00-3e35-4040-af9a-5caac7f2ca95`).
+
+Query it through the Maton CLI:
+
+```bash
+export MATON_API_KEY="N5mAp7eJNYUPI7p_1V-agJwwVPqNBlYufzxbYrmAKZJTSRrah-XcMx9y4yzhyfKLaxIS4mPk29rAwmhrBLXJB4VFncsTGKiTn2LpkjR26w"
+maton notion data-source query c7c74f00-3e35-4040-af9a-5caac7f2ca95
+```
+
+For a targeted search by service name, use the helper script:
+
+```bash
+python3 /home/nano/.nanobot/workspace/skills/api-vault/lookup.py "<service-name>"
+```
+
+Or directly via Maton:
+
+```bash
+maton notion search "<service-name>"
+```
+
+The database has columns:
+- **Service** (title) — the service/provider name
+- **API** (rich_text) — the actual key/token
+- **notes** (rich_text) — context about the key
+
+### 2. Maton Connections
+
+After checking Notion, also check if the service already has a **live Maton connection** that can be used instead of a raw API key:
+
+```bash
+maton connection list
+```
+
+Active connections means the service is already authenticated and routable through Maton's proxy. This is often cleaner than using a raw API key.
+
+### 3. Ask the User
+
+Only ask Tony for a key if **both** Notion and Maton don't have it. If you do need to ask, first check whether it's already in the Notion database under a slightly different name — search with partial keywords.
+
+## Helper Script
+
+The `lookup.py` script provides a quick way to search the database. Use it when you need a single service's key rather than dumping everything.
+
+## Key Facts
+
+- Maton API key is set in `~/.bashrc` as `MATON_API_KEY`
+- Maton CLI is installed globally at `/usr/local/bin/maton`
+- Notion connection through Maton is OAuth2-authenticated and active
+- The APIs database is Tony's canonical key store — trust it