API keys scoped per workspace, database, branch.

Read only API keys