Client Management
OAuth client provisioning — create credentials, rotate the client secret, grant or revoke org/project scope, attach permission bits, list usage. Admin-only; external developers receive their client_id + client_secret pair via Part3 support, not via this surface.