Document Setup Keys concept vs SSO, PAT creation and usage, and the workaround for renaming a setup key — the API silently ignores the name field on PUT, so the fix is to UPDATE store.db directly and restart netbird-server.