manage_app_key_requests

Warden-checked App keys into the vault; metadata only. Needs a paired Desktop-signed proof. Unpaired: use qraft keys in Desktop. Production server keys require browser owner approval. No MCP delivery/receipts.