feat(security): implement dynamic tactical license gate, instant key revocation, and clean hardcoded credentials

apps/dashboard/src/pages/DashboardHome.tsx

@@ -6,6 +6,7 @@ import {
   Eye, 
   EyeOff, 
   RefreshCw, 
+  Trash2,
   ShieldCheck, 
   Globe,
   Zap,
@@ -53,7 +54,7 @@ const DashboardHome = ({ tenant, keys, loading, onRefresh }: DashboardHomeProps)
   const createKey = async (name: string, limit: number) => {
     if (!tenant) return;
     try {
-      await axios.post(`/api/auth/management/keys/${tenant.id}`, {
+      await axios.post(`/api/auth/management/keys`, {
         name,
         rateLimit: limit
       });
@@ -65,6 +66,18 @@ const DashboardHome = ({ tenant, keys, loading, onRefresh }: DashboardHomeProps)
     }
   };
 
+  const deleteKey = async (keyId: string, keyName: string) => {
+    if (!window.confirm(`Are you sure you want to revoke the API key "${keyName || 'Production Key'}"? This action cannot be undone.`)) {
+      return;
+    }
+    try {
+      await axios.delete(`/api/auth/management/keys/${keyId}`);
+      onRefresh();
+    } catch (e) {
+      alert('Failed to revoke key');
+    }
+  };
+
   return (
     <div className="animate-in fade-in slide-in-from-bottom-4 duration-700">
       {/* Hero Section */}
@@ -264,9 +277,14 @@ const DashboardHome = ({ tenant, keys, loading, onRefresh }: DashboardHomeProps)
                       </div>
                     </td>
                     <td className="px-6 py-6 text-right">
-                      <button className="p-2 text-slate-500 hover:text-white" onClick={onRefresh}>
-                        <RefreshCw size={16} />
-                      </button>
+                      <div className="flex items-center justify-end gap-1">
+                        <button className="p-2 text-slate-500 hover:text-white" title="Refresh" onClick={onRefresh}>
+                          <RefreshCw size={16} />
+                        </button>
+                        <button className="p-2 text-slate-500 hover:text-red-400 transition-colors" title="Revoke Key" onClick={() => deleteKey(apiKey.id, apiKey.name)}>
+                          <Trash2 size={16} />
+                        </button>
+                      </div>
                     </td>
                   </tr>
                 ))}