Add improvements

services/distribution/app/api/routes.py

@@ -19,15 +19,8 @@ logger = structlog.get_logger()
 route_builder = RouteBuilder('distribution')
 
 
-async def verify_internal_api_key(x_internal_api_key: str = Header(None)):
-    """Verify internal API key for service-to-service communication"""
-    required_key = settings.INTERNAL_API_KEY
-    if x_internal_api_key != required_key:
-        logger.warning("Unauthorized internal API access attempted")
-        raise HTTPException(status_code=403, detail="Invalid internal API key")
-    return True
-
-
+# ✅ Security: Internal API key system removed
+# All authentication now handled via JWT service tokens at gateway level
 router = APIRouter()