Add Site Metadata Endpoint and API Key Management

- Introduced a new Site Metadata endpoint (`GET /wp-json/igny8/v1/site-metadata/`) for retrieving available post types and taxonomies, including counts.
- Added API key input in the admin settings for authentication, with secure storage and revocation functionality.
- Implemented a toggle for enabling/disabling two-way sync operations.
- Updated documentation to reflect new features and usage examples.
- Enhanced permission checks for REST API calls to ensure secure access.

igny8-wp-integration-plugin/admin/settings.php

@@ -15,6 +15,7 @@ $email = get_option('igny8_email', '');
 $site_id = get_option('igny8_site_id', '');
 $access_token = function_exists('igny8_get_secure_option') ? igny8_get_secure_option('igny8_access_token') : get_option('igny8_access_token');
 $is_connected = !empty($access_token);
+$api_key = function_exists('igny8_get_secure_option') ? igny8_get_secure_option('igny8_api_key') : get_option('igny8_api_key');
 $date_format = get_option('date_format');
 $time_format = get_option('time_format');
 $now = current_time('timestamp');
@@ -53,6 +54,7 @@ $pending_links = array_filter($link_queue, function($item) {
     return $item['status'] === 'pending';
 });
 $webhook_logs = igny8_get_webhook_logs(array('limit' => 10));
+ $two_way_sync = (int) get_option('igny8_enable_two_way_sync', 1);
 
 ?>
 
@@ -60,6 +62,13 @@ $webhook_logs = igny8_get_webhook_logs(array('limit' => 10));
     <h1><?php echo esc_html(get_admin_page_title()); ?></h1>
     
     <?php settings_errors('igny8_settings'); ?>
+    <div class="notice notice-info inline" style="margin-top:10px;">
+        <p>
+            <strong><?php _e('Integration modes explained:', 'igny8-bridge'); ?></strong><br />
+            <?php _e('• Enable Sync Operations: controls whether background and manual sync actions occur (cron jobs, webhooks, sync buttons).', 'igny8-bridge'); ?><br />
+            <?php _e('• Enable Two-Way Sync: controls whether bi-directional syncing (IGNY8 → WordPress and WordPress → IGNY8) is permitted. Disabling this will suppress sync actions but API endpoints remain accessible for discovery and diagnostics.', 'igny8-bridge'); ?>
+        </p>
+    </div>
     
     <div class="igny8-settings-container">
         <div class="igny8-settings-card">
@@ -87,6 +96,32 @@ $webhook_logs = igny8_get_webhook_logs(array('limit' => 10));
                             </p>
                         </td>
                     </tr>
+                    <tr>
+                        <th scope="row">
+                            <label for="igny8_api_key"><?php _e('API Key', 'igny8-bridge'); ?></label>
+                        </th>
+                        <td>
+                            <input
+                                type="password"
+                                id="igny8_api_key"
+                                name="igny8_api_key"
+                                value="<?php echo esc_attr($api_key ? '********' : ''); ?>"
+                                class="regular-text"
+                                placeholder="<?php _e('Paste your IGNY8 API key here (optional)', 'igny8-bridge'); ?>"
+                            />
+                            <p class="description">
+                                <?php _e('If you have an API key from the IGNY8 SaaS app, paste it here to authenticate the bridge. Leave blank to use email/password.', 'igny8-bridge'); ?>
+                            </p>
+                            <?php if ($api_key) : ?>
+                                <form method="post" action="" style="display:inline-block; margin-left:10px;">
+                                    <?php wp_nonce_field('igny8_revoke_api_key'); ?>
+                                    <button type="submit" name="igny8_revoke_api_key" class="button button-secondary" onclick="return confirm('<?php _e('Revoke stored API key? This will remove the key from this site.', 'igny8-bridge'); ?>');">
+                                        <?php _e('Revoke API Key', 'igny8-bridge'); ?>
+                                    </button>
+                                </form>
+                            <?php endif; ?>
+                        </td>
+                    </tr>
                     <tr>
                         <th scope="row">
                             <label for="igny8_password"><?php _e('Password', 'igny8-bridge'); ?></label>
@@ -152,6 +187,23 @@ $webhook_logs = igny8_get_webhook_logs(array('limit' => 10));
                             </p>
                         </td>
                     </tr>
+                    <tr>
+                        <th scope="row">
+                            <label for="igny8_enable_two_way_sync"><?php _e('Enable Two-Way Sync', 'igny8-bridge'); ?></label>
+                        </th>
+                        <td>
+                            <label>
+                                <input
+                                    type="checkbox"
+                                    id="igny8_enable_two_way_sync"
+                                    name="igny8_enable_two_way_sync"
+                                    value="1"
+                                    <?php checked($two_way_sync, 1); ?>
+                                />
+                                <?php _e('Allow bi-directional sync (IGNY8 ↔ WordPress). When disabled, outbound/inbound sync actions are suppressed but API endpoints remain accessible.', 'igny8-bridge'); ?>
+                            </label>
+                        </td>
+                    </tr>
                     <?php if ($email) : ?>
                     <tr>
                         <th scope="row"><?php _e('Email', 'igny8-bridge'); ?></th>