API keys
Create scoped, IP-limited keys at /dashboard/platform/api-keys.
Each user manages their own ApiKey records: create, scope, limit by IP, revoke. Scopes: read_inventory, write_inventory, write_leads, write_deals, write_service, read_reports. Requires canManageKeys.