why is cryptographic keys not covered under IAM?

In my opinion, simply because IAM is all about Authorization, i.e. who can do what.

"Cryptographic keys" is totally a different topic and it falls under Cryptography section (things like PKI, algorithms, etc.). So if there were one, surely you would find "cryptographic keys" topics there. 🙂