Flag API key creators for revenue ops review before renewals

Your API key creation events arrive unflagged, creating compliance gaps and unexpected product access that risk revenue recovery. Give revenue operations reviewer flags so exceptions close before the next billing run.