User scoped API keys for scripts and spacectl

We’d like user scoped API keys so each engineer can authenticate to Spacelift and spacectl with their own credentials, make scripting and testing easier, and keep clear audit trails. Keys should inherit the user’s permissions and be revoked automatically when the user is deactivated.