ExternalGraderCredential

Credential material sent on every outbound call to the grader. Must be null when authenticationType is none; required (non-empty string) when authenticationType is api_key. Encrypted at rest via KMS; never returned in any response. Wire mapping: api_key → X-Api-Key: <credential>.