Reset the API key for a user (accessible to self, same-organization Admins, or Secretariat)

<h2>Access Control</h2> <p>Authenticated users can reset their own API secret. Organization admins can reset users in their organization. Secretariat users can reset any user's API secret.</p> <h2>Expected Behavior</h2> <p><b>Regular User:</b> Resets user's own API secret</p> <p><b>Admin User:</b> Resets any user's API secret in the Admin's organization</p> <p><b>Secretariat:</b> Resets any user's API secret</p>