Delete Api Key

Delete an API key belonging to the caller's active team.

Keys are team-bound and shared, but managing them is gated by the team role matrix: only members holding CREATE_API_KEYS (owner, admin, editor) may delete a team key. Viewer and billing members are rejected with 403.