#37 FTX-37: API key issuance + member namespace provisioning

POST/GET/DELETE /v1/tenants/{id}/api-keys (raw key shown once); member add writes role/permissions/membership into tenant auth namespace (ROLE_PERMISSION_MAP); scripts/bootstrap_platform_key.py seeds platform key. Phase 1.