Stop Handing Out Your Master Key: Scoped Virtual Keys for LLM Traffic

If every service in your stack shares one provider API key, you don't have key management — you have a single point of failure with a dozen copies. The fix isn't better safekeeping of the master key.