Document show-once behavior for API keys

API keys and organization access tokens are shown only once at creation and cannot be retrieved afterwards. Security scheme descriptions have been updated to reflect this, including where to create a replacement token if lost.