Scoped API Keys for CI Pipelines: Least-Privilege Rotation After Build Log Leaks

Short answer: give each CI job a short-lived, narrowly scoped API key, keep it out of build output,...