API keys

Key management

Issue hrd_test_ and hrd_live_ keys with least-privilege scopes. Secrets are shown once.