API keys
Gateway keys authenticate your application. The secret is shown once at creation and only a hash is stored.
The API never returns stored key hashes. Revoking a key takes effect for new gateway requests immediately.
Cache scope is fixed per key at creation. Tenant keys share semantic cache entries with other keys in the same workspace; private keys do not.