Make developer app address lookups case-insensitive (#762)

## Summary
- Use `lower()` on both sides of the address comparison in
`GetDeveloperApps` and `GetDeveloperAppsWithGrants` SQL queries
- Previously, lookups were case-sensitive which could cause failures
when API keys were passed with mixed casing (e.g. `0x`-prefixed vs bare
hex)

## Test plan
- [ ] Verify developer app lookup works with uppercase, lowercase, and
mixed-case addresses
- [ ] Verify existing developer app lookups continue to work

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>

Author: 3 people

api/v1_developer_apps.go

@@ -18,6 +18,10 @@ func (app *ApiServer) v1DeveloperApps(c *fiber.Ctx) error {
 		address = "0x" + address
 	}
 
+	// Normalize address to lowercase to ensure case-insensitive matching
+	// (addresses in the DB are stored as lowercase)
+	address = strings.ToLower(address)
+
 	developerApps, err := app.queries.GetDeveloperApps(c.Context(), dbv1.GetDeveloperAppsParams{
 		Address: address,
 	})

api/v1_developer_apps_test.go

@@ -8,14 +8,16 @@ import (
 	"github.com/stretchr/testify/assert"
 )
 
+const testDeveloperAppAddress = "0x7d7b6b7a97d1deefe3a1ccc5a13c48e8f055e0b6"
+
 func TestGetDeveloperAppsQueries(t *testing.T) {
 	app := testAppWithFixtures(t)
 	developerApps, err := app.queries.GetDeveloperApps(t.Context(), dbv1.GetDeveloperAppsParams{
 		UserID: 1,
 	})
 	assert.NoError(t, err)
 	assert.Len(t, developerApps, 1)
-	assert.Equal(t, "0x7d7b6b7a97d1deefe3a1ccc5a13c48e8f055e0b6", developerApps[0].Address)
+	assert.Equal(t, testDeveloperAppAddress, developerApps[0].Address)
 	// redirect_uris must be an empty slice (not nil) when no URIs are registered
 	assert.Equal(t, []string{}, developerApps[0].RedirectUris)
 }
@@ -26,11 +28,47 @@ func TestGetDeveloperApp(t *testing.T) {
 	var resp struct {
 		Data dbv1.GetDeveloperAppsRow
 	}
-	status, body := testGet(t, app, "/v1/developer_apps/0x7d7b6b7a97d1deefe3a1ccc5a13c48e8f055e0b6", &resp)
+	status, body := testGet(t, app, "/v1/developer_apps/"+testDeveloperAppAddress, &resp)
 	assert.Equal(t, 200, status)
 	assert.True(t, strings.Contains(string(body), `"user_id":"7eP5n"`))
 	assert.True(t, strings.Contains(string(body), `"name":"cool app"`))
 	assert.Equal(t, "cool app", resp.Data.Name)
 	// redirect_uris must be an empty slice (not nil) when no URIs are registered
 	assert.Equal(t, []string{}, resp.Data.RedirectUris)
 }
+
+func TestGetDeveloperAppUppercaseAddress(t *testing.T) {
+	app := testAppWithFixtures(t)
+
+	var resp struct {
+		Data dbv1.GetDeveloperAppsRow
+	}
+	// Uppercase address should still find the app (case-insensitive lookup)
+	status, _ := testGet(t, app, "/v1/developer_apps/0x7D7B6B7A97D1DEEFE3A1CCC5A13C48E8F055E0B6", &resp)
+	assert.Equal(t, 200, status)
+	assert.Equal(t, "cool app", resp.Data.Name)
+}
+
+func TestGetDeveloperAppMixedCaseAddress(t *testing.T) {
+	app := testAppWithFixtures(t)
+
+	var resp struct {
+		Data dbv1.GetDeveloperAppsRow
+	}
+	// Mixed-case address should still find the app (case-insensitive lookup)
+	status, _ := testGet(t, app, "/v1/developer_apps/0x7d7B6B7A97d1deEFe3A1ccc5A13c48E8F055e0B6", &resp)
+	assert.Equal(t, 200, status)
+	assert.Equal(t, "cool app", resp.Data.Name)
+}
+
+func TestGetDeveloperAppWithoutHexPrefix(t *testing.T) {
+	app := testAppWithFixtures(t)
+
+	var resp struct {
+		Data dbv1.GetDeveloperAppsRow
+	}
+	// Address without 0x prefix should still find the app
+	status, _ := testGet(t, app, "/v1/developer_apps/7D7B6B7A97D1DEEFE3A1CCC5A13C48E8F055E0B6", &resp)
+	assert.Equal(t, 200, status)
+	assert.Equal(t, "cool app", resp.Data.Name)
+}