Modernize Datadog API authentication with scoped credentials

Datadog is replacing its dual-key API authentication with four purpose-specific approaches: Personal Access Tokens, Service Access Tokens, workload identity federation, and customer-managed OAuth clients. The new model provides scoped, identity-aware authentication for human users, CI/CD pipelines, Terraform workflows, and AI agents. This enables detailed audit attribution for security and compliance teams.