[Feature][API] Finer rights management for API keys

[kb-light]

Setting some restrictions would be a possible improvement for the API keys. With that in place it is possible to have an API key which only has write access to the radio API and no permissions to read/write QSOs.