List API keys

Scope: keys (always opt-in). Scoped to the CALLING key's mode: a sandbox (sk-coasty-test-*) key sees only sandbox keys, a live key sees live plus legacy. Each item carries key_kind so you can tell them apart. A key-store outage returns 503 DB_UNAVAILABLE with Retry-After rather than a bare 500.