What each API-key scope and pod-visibility setting reaches

One table for the dashboard's scope picker, lium keys and the SDK — scope, one-sentence description, what a key holding it can do, the route families it opens, and whether a key created without naming scopes gets it; the two pod-visibility values; and the money routes only billing reaches. Static text, no account data, so no credential is needed.