Adds sensitiveKeys/globalSensitiveKeys/mergedSensitiveKeys fields to ApplicationConfig, unwraps the new AppConfigResponse envelope in useApplicationConfig, and renders an editable Sensitive Keys section with read-only global pills and add/remove app-specific key tags. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>