API keys

Workspace-scoped tokens for the Oxvault CLI, CI runners, and the gateway forwarder.