EditIntent — Replace a Secret Without Round-Tripping It

The server never sends the real API key back — only a safe display mask. «Replace» opens an empty input for a brand-new value; «Keep current» cancels and returns to view mode without touching the stored secret.