API keys

API keys carry team scope as metadata, use the dg_ prefix, and only show the secret once at creation time. This page covers lifecycle and best practices.

Documentation in progress.