Credential control

Keys and service accounts

Create a least-privilege credential, reveal it once, run a working request, rotate with a 24-hour overlap, and trace every lifecycle event. Live and test credentials are deployment-isolated.