API keys

Create scoped, IP-limited keys at /dashboard/platform/api-keys.

Each user manages their own ApiKey records: create, scope, limit by IP, revoke. Scopes: read_inventory, write_inventory, write_leads, write_deals, write_service, read_reports. Requires canManageKeys.