Company group scoping for API keys

API keys currently support only two scopes: global (all companies) or a single company. There's no middle ground for a customer who wants a key limited to a subset of companies.

Request

Add a third scope option for API keys: company group. This would let an admin select a defined group of companies (rather than one company or all companies) that the key has access to.

Use case

An MSP with multiple internal teams or business units wants to issue API keys scoped to a specific set of clients, without granting access to their entire company list or having to manage a separate key per company.