feat: add api key generation endpint + role authorization

src/dto/api.rs

@@ -178,3 +178,14 @@ pub struct ChatDelta {
     pub role: Option<Role>,
     pub content: Option<String>,
 }
+
+#[derive(serde::Deserialize)]
+pub struct CreateApiKeyRequest {
+    pub name: String,
+    pub scopes: Vec<String>,
+}
+
+#[derive(serde::Serialize)]
+pub struct CreateApiKeyResponse {
+    pub api_key: String, // ONLY returned once
+}