API authentication

Authenticate API calls with a workspace key.

Workspace keys are created under Profile and carry the permissions of the account that created them. Send the key as a bearer token.

Keys are shown once at creation. If a key is lost, revoke it and create another rather than trying to recover it.