[shelleyshen-0]

TL;DR

Adds the REST controllers for the three v2 actors over the shared key management facade from #2840. Draft, stacked on that PR.

Additional Details (optional for docs, build, test, refactor, ci, chore, style, and revert PRs)

Each controller only maps routes to KeyManagementFacade calls with its KeyManagementActor. The NCA, issuer service and user always come from the route.

• KeyOwnerKeysController under /v2/api-keys/key-owner.
• AccountAdminKeysController under /v2/api-keys/account-admin.
• PlatformAdminKeysController under /v2/api-keys/platform-admin.

The controllers follow the existing controller style: literal paths in the mappings, private constants only for path variable names, and @Parameter descriptions on path variables.

This PR targets feat/api-keys-v2-common-layer, not the release branch, so the diff shows only the controllers. It should be retargeted after #2840 merges.

Not included: actor audit logging, the key count limit, and bulk operations.

For the Reviewer

Compare the three controllers for which routes each actor exposes. Account Admin has no cross-account statuses route, and only Platform Admin can update an issuer-service status.

For QA (optional for docs, build, test, refactor, ci, chore, style, and revert PRs)

Integration tests cover each actor over HTTP. bazel test //src/control-plane-services/api-keys:tests passes on this code. QA is not needed yet.

Issues

Relates to #2058
Relates to #2057
Relates to #2056

Checklist

• I am familiar with the Contributing Guidelines.
• I have signed off my commits for Developer Certificate of Origin (DCO) compliance.
• New or existing tests cover these changes.
• The documentation is up to date with these changes.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}