During bring-up of a new GPU cluster, an infrastructure engineer needs to configure automated, machine-to-machine authentication with NGC for a production deployment pipeline that must not depend on any individual employee remaining in the NGC org. Which type of NGC API key is most appropriate?