Adding API Key to access some Apis

[mazipan]

Is your feature request related to a problem? Please describe.
Additional layer to avoid people abuse the API outside the application

Describe the solution you'd like

• Add new env API_KEY
• Passing the key in the header request
• Read the key, make sure it's match with our env value
• I can rotate the value when abuse happens, ideally it happened in the runtime, but if it's hard then we can trigger deployment

Describe alternatives you've considered
Adding a static IP blocklist

[aldy505]

Ini deployed on vercel kan? Harusnya bisa implement static IP blocklist untuk certain endpoint dari dashboard Vercel.

[mazipan]

Harus mbayar fitur block IP nya 🙈