Settings.

Per-tenant API keys for SCOUT, FORGE, WRITER, INFRA. Stored encrypted in KV; never sent to the browser. Add what you need; missing providers degrade their respective modules to "skipped".