LiteLLM gateways need key scope and administrative separation

Separating LiteLLM master authority, virtual keys, provider credentials, and gateway routes.