Add API key permissions

[taobojlen]

Problem being solved

Currently, API keys in Coop are global and give access to the entire API.

This is a problem -- as we add more endpoints, this is a very broad set of permissions to give to every API consumer!

Proposed solution

We allow for multiple API keys, each giving access to a specific (user-configurable) set of API resources.

Alternatives considered

N/A, this is a standard approach.

Anything else

No response

Screenshots

No response

Checklist

• I’ve reviewed and agree to follow the code of conduct