Upsert a BYOK provider key

Stores a sealed-box ciphertext for one provider. Refuses any payload sealed against a kek_id other than the cloud's current encryption pubkey (/v1/byok/encryption-pubkey).

Requires the byok:write scope.

curl -X POST "https://api.bitrouter.ai/v1/byok/keys" \  -H "Content-Type: application/json" \  -d '{}'

{}

{
  "error": null
}

{
  "error": null
}

{
  "error": null
}