Create Api Key

Self-service API key generation and rotation for an approved account.

The key is returned exactly once; afterwards only its existence is reported (has_api_key). If a key already exists, the caller must pass rotate=true — the old key stops working immediately. Admin approval of the account (not key possession) is what gates API access: /v1 rejects any non-approved account even with a valid key.