API key management panel with masked credentials, reveal/copy controls, scope badges, and active/revoked status indicators.