Make Scorecard use keys from keyman

> [!NOTE]
> Migrated from [augurlabs/augur#3690](https://github.com/augurlabs/augur/issues/3690)
> Originally opened by `@MoralCode` on 2026-02-13

---

> One thing I did notice: scorecard uses `GithubApiKeyHandler.get_random_key()` (https://github.com/chaoss/augur/blob/main/augur/tasks/git/dependency_tasks/core.py#L88-L89), which is the legacy key system; just picks a random key with no rate limit awareness. It doesn't go through keyman at all. So neither system knows what the other is doing with the same keys, which could be related to #179?

_Originally posted by @shlokgilda in [#202](https://github.com/chaoss/augur/issues/3671#issuecomment-3894544371)_

This may be difficult since we may need deeper integration with keyman i.e. detect if scorecard says the rate limit is hit and report back to keyman, and also enforcing the minimum key thresholds (50 ish calls)