Prepare an API-key review checklist for the MandAPI keys used by this application. Inspect configuration names and deployment documentation without reading or displaying real secret values. Produce an inventory of application, environment, owner, secret reference and known restrictions. Mark unknown fields explicitly. Recommend stale keys for owner review, but do not revoke keys or change production settings automatically. Use only MandAPI account capabilities that the owner can actually see.