Optional client-generated key (recommended: a UUID) that makes a write safe to retry. Replaying the same key within the retention window returns the original response instead of creating a duplicate. Scoped per tenant.