[renzon]

What does this PR do?

The CLI could create, update, protect, disable and revoke API keys, but rotating one meant revoking it and creating a replacement by hand, losing the key's scopes, folders and metadata. roboflow api-key roll KEY_ID calls the existing POST /:workspace/api-keys/:keyId/roll endpoint, which revokes the key and mints its replacement with the same configuration, and prints the new secret once. --rotation-due-at and --owner set the replacement's rotation schedule.

Related Issue(s): ENT-2118

Type of Change

• New feature (non-breaking change that adds functionality)

Testing

• I have tested this change locally
• I have added/updated tests for this change

Test details:

• tests/cli/test_api_key.py: help, text and JSON output, confirmation without a TTY, schedule forwarding, 409 and 404 exit codes
• Adapter tests: roll path with URL-encoded key ID, body only when fields are given, status code attached to RoboflowError

Checklist

• My code follows the style guidelines of this project
• I have performed a self-review of my own code
• My changes generate no new warnings or errors
• I have updated the documentation accordingly (if applicable)

Additional Context

The public docs page "API Key Management API" (roboflow/docs#407) will list the command once this ships.