feat: add api token authentication

### Additions

* added new type `CreateBotType`
* added new input type `CreateBotInput`
* added new `createBot(createBotInput: CreateBotInput!): (botUser: IUserType!, apiToken: String!)` mutation
* added new `rotateApiKey(userId: ID!): newApiToken: String!` mutation
* added new `EndpointPermissionsEnum` enum
* added new `allowedEndpoints: [EndpointPermissionsEnum!]!` field on `IUserType`

Closes #530