List the API keys and client-credential pairs of an organization.
For each key: its ID, name, type, creation, expiry, last use, revocation time, and the resources it can access.
For each client-credential pair (an OAuth client that authenticates with the client credentials grant): its client ID, name, creation time, creator, grant types, scopes, and the resources it can access.
Key values and client secrets are never returned.
Pass a key's ID to RenameApiKey or DeleteApiKey.
Those tools do not work on pairs, so manage pairs in GraphOS Studio or with `rover api-key`.
Provide the organization ID, which GetMyIdentity returns.
Optionally filter keys by status (ACTIVE by default, or ALL, EXPIRED, REVOKED) and type (OPERATOR, SUBGRAPH, VARIANT, GATEWAY, SCIM).
The filters do not apply to pairs.
The two lists page separately: page keys with first and after, and pairs with pairsFirst and pairsAfter.