Delete a BYOK provider key

Use when: caller wants to remove a BYOK provider key entirely (rotation, compromise response, project shutdown) — Layer falls back to its pooled credentials for the affected provider once removed

Permanently removes a provider key. Subsequent requests routed to that provider will fall back to Layer’s pooled credentials (if available) or fail with an upstream-credentials error.