Prefix matching bypasses key validation

Code reviewHard22 minStripe style

Your task

Review this Go API-key middleware that already uses a constant-time comparison.