Admin API Keys

Long-lived, scoped credentials for KRC internal-API automation (release registration, VEX upload).