Clean up free_score_usage rows keyed by rotating LB IPs (stale buckets created before the caller-key fix). Requires operator authorization.

Without keys, returns candidate stale rows (dry run). With keys, deletes exactly those rows — the operator confirms the specific keys, so a legitimate client that happens to live in a Google range is never purged without review.