Function ensure_access_key 

pub async fn ensure_access_key(
    cfg: EnsureAccessKeyConfig,
) -> Result<AccessKeyOutcome>

Run the device-code flow, persist the resulting key to keys.toml, and return the new entry’s identifying fields.