Central Team and policy-bearing API keys

Introduces Central Team as the ledger, and API keys that carry geography, groups, allow/deny lists, rate limits and a spend cap that keeps the team's balance covered.