Changed "bearer_auth" to "Bearer" in utoipa security annotations for QR and Hackathon handlers to match the registered SecurityAddon scheme name. Fixes Swagger UI not sending Authorization header. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>