Quote wizard: fix API URL and suPHP auth header handling

- Change production API URL from /msp-api to /quote/api
- Switch admin auth to X-Api-Key header as primary (suPHP strips Authorization)
- Keep Bearer token as fallback for PHP-FPM environments

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

projects/msp-tools/quote-wizard/frontend/.env.production

@@ -1 +1 @@
-VITE_API_URL=/msp-api
+VITE_API_URL=/quote/api