List all active API keys for the authenticated user.
Returns only the stored metadata — plaintext cannot be recovered. Revoked
keys are excluded by default (pass the internal include_revoked=True
via repo if you need them; not exposed as a query param today).