Secret reveal.

Reveal-once semantics for API keys and webhook secrets — a Dialog that opens already showing the value, with an explicit 'won't be shown again' warning and a copy-to-clipboard field. There is no re-open; the value must be regenerated to be seen twice.