- Add `revoked_at` column to `api_keys` table for soft-revocation - Add `keys` CLI command group for creating, listing, and revoking keys - Switch vault builder to `zig build-exe` to avoid host runner link errors - Bump version to 0.122.72