API keys
Create and rotate API keys from the console for server-to-server access. Community auth documentation uses prefixes such asrgs_live_* and rgs_test_* — treat keys like passwords.
- Scope keys to the environments and projects that need them.
- Prefer test keys in non-production.
- Rotate after staff changes or leaks.