Creates a new API key for the authenticated user. The plaintext key is returned only once in this response — store it securely.Optionally restrict the key to specific services, tools, or spending limits using the permissions field.Auth: Requires JWT token (Authorization: Bearer <token>).