Leaked Stripe restricted key — scoped damage, still rotate

Stripe restricted keys (rk_live_*) grant limited scopes rather than full account access, but a leaked one still lets an attacker operate within those scopes. Rotate and audit scope on the next key.