Now that agent.nats.api_key carries it (as part of the merged
agent.yaml config), the flat top-level copy is redundant. Nothing
else in the codebase reads metadata['agent_api_key'] directly.