studio: Improve API Keys area to better understand where and how used

先檢視 Studio API Keys 區域，以及金鑰名稱如何與 auth.json 中的 Command Code 設定相關。此 issue 描述了數種可能的功能，因此在開始實作之前，需要先縮小範圍並明確完成條件。

Feature Description

Recently, I needed to delete an API key. When I went into API Keys area of the Studio, I saw I had 8-10 keys dating back to late 2025.

I found it difficult to know:

• which keys were active (last used)
• if they expire/d (doesn't seem they do)
• the names were not meaningful nor did it match the name in the auth.json Command Code config settings
• I could not edit the name to make them meaningful to me
• recent usage of keys and where used (to identify if any key leaked and used by some strange IP address or geo)

So, I ended up just deleting all keys one by one and starting over from scratch, but then I realized:

• the name in auth.json did not match
• and the only way I could identify a key was by some UTC timestamp so I could tell one cli on one machine was an older key than another because I knew I created one before the other

Use Case

In general, be useful to:

• know which key used where
• add a description for the key purpose
• names match installed name in auth.json
• edit names to be descriptive
• show some recent use (time, IP address, geo) to identify if any leaks
• pause key
• rotate key (vs delete and create and edit name a description)

Could take some cues from Unkey API Key management features. See: https://www.unkey.com/docs/platform/apis/keys

Additional Context

No response

How important is this to you?

Medium. But, this will increase if I use Command Code API more for inference in apps vs just the cli used on two devices or if I want to distinguish between a key for cli and a key for desktop.