Add audit logs for API keys

[piffio]

In its simplest form, we should store the calls for each API key and have buckets views for the last 30 days / 7 days / 1 day / 1 hour in order to spot outliers.

We might want to couple this with ad-hoc rate limiting.