fix: delete keys and seed only active ones

Ensure admin key deletion removes the DB record and returns a
"deleted" status. Update seeder idempotency to count only active keys
when deciding whether to skip or create new keys.

cmd/seeder/seeder.go

@@ -30,6 +30,19 @@ func (s *Seeder) matchesSeederPrefix(name string) bool {
 	return strings.HasPrefix(name, "demo-") || strings.HasPrefix(name, "seeder-") || strings.HasSuffix(name, "-demo")
 }
 
+func filterActiveKeys(keys []KeyResponse) []KeyResponse {
+	if len(keys) == 0 {
+		return nil
+	}
+	active := make([]KeyResponse, 0, len(keys))
+	for _, key := range keys {
+		if strings.EqualFold(strings.TrimSpace(key.Status), "active") {
+			active = append(active, key)
+		}
+	}
+	return active
+}
+
 func (s *Seeder) seedNamespaces() error {
 	gen := NewGenerator(s.rng, s.seederTag, s.cfg.Profile)
 	namespaces := gen.GenerateNamespaces(s.profile.Namespaces)
@@ -450,6 +463,8 @@ func (s *Seeder) seedKeys() error {
 			}
 		}
 
+		activeKeys := filterActiveKeys(existingKeys)
+
 		// For reset mode, delete existing keys that belong to seeder masters
 		if s.cfg.Reset && s.matchesSeederPrefix(master.Name) && len(existingKeys) > 0 {
 			for _, key := range existingKeys {
@@ -461,25 +476,27 @@ func (s *Seeder) seedKeys() error {
 				}
 			}
 			existingKeys = []KeyResponse{}
+			activeKeys = []KeyResponse{}
 		}
 
 		// Check if we already have enough keys (idempotency)
 		targetCount := s.profile.KeysPerMaster
-		if len(existingKeys) >= targetCount {
+		if len(activeKeys) >= targetCount {
 			if s.cfg.Verbose {
-				fmt.Printf("  ○ %s: %d keys (exists, skipped)\n", master.Name, len(existingKeys))
+				fmt.Printf("  ○ %s: %d keys (exists, skipped)\n", master.Name, len(activeKeys))
 			}
-			s.summary.Keys.Skipped += targetCount
-			seededKeys[master.ID] = existingKeys[:targetCount]
+			s.summary.Keys.Skipped += len(activeKeys)
+			seededKeys[master.ID] = activeKeys[:targetCount]
 			continue
 		}
 
 		// Create only the missing keys
-		keysToCreate := targetCount - len(existingKeys)
+		s.summary.Keys.Skipped += len(activeKeys)
+		keysToCreate := targetCount - len(activeKeys)
 		keys := gen.GenerateKeys(keysToCreate)
 
 		masterKeys := make([]KeyResponse, 0, targetCount)
-		masterKeys = append(masterKeys, existingKeys...)
+		masterKeys = append(masterKeys, activeKeys...)
 		createdCount := 0
 
 		for _, key := range keys {