API keys & feed health

Store a key for any gated data source and test every feed against its live endpoint. Keys are encrypted before they touch the database and are never sent back to the browser — only a masked hint. A key set as a platform secret always takes priority over one saved here.