Create an API key for the authenticated user

Create a personal API key for the currently authenticated user. The key inherits the user's role, so it grants no more access than the user already has. The response contains the key itself, which is shown only once and cannot be retrieved afterwards.