Static API keys are the wrong primitive for agent authentication

API keys survive because they are convenient. You can generate one in a dashboard, paste it into an...