API keys now have scopes

When you create a key you now choose what it can do: Inference (chat, audio, embeddings, images) and/or Manage account (keys, billing, usage). New keys are inference-only by default — the right shape for a key you paste into an editor, because it can never rotate your keys or touch billing if it leaks.\n\nNothing changes for keys you already have: they keep exactly the access they had. Scopes show as small tags on the Keys page.