Create an API key

Issues a new API key with the requested scopes. The plaintext key is returned only in this response and cannot be retrieved afterwards.

Required scope: `apikeys:issue`

The issued key is always weaker than the caller: the requested scopes must be a subset of the scopes held by the calling key, `apikeys:issue` itself cannot be granted, and `external_data:*` scopes are not issuable through this endpoint (they require dashboard sign-in).

This endpoint accepts API key authentication only. Issuing from the dashboard is done in the console, which is also the only way to grant `apikeys:issue` and `external_data:*`.