Returns the current API key's authorization context — its bound user, granted scopes, and any resource-scope narrowing. Useful for AI clients (MCP) to hide tools that the key cannot use, instead of failing at the first request.