feat(apikeys): list keys with the signed-in session

[LorrisSaintGenez]

What

algolia apikeys list no longer requires an admin API key: being signed in with an application selected is enough.

• List through the dashboard Public API when no API key is passed explicitly, following pagination.
• Keep the Search API path when --api-key, --admin-api-key, ALGOLIA_API_KEY or ALGOLIA_ADMIN_API_KEY is set, which still lists every key of the application.
• Drop the acls: admin annotation that made the command unreachable for a signed-in user.
• Move the routing decision to Profile.HasExplicitAPIKey(), shared with apikeys create. It now also covers ALGOLIA_ADMIN_API_KEY, which the create-side helper was missing.

The two paths don't return the same set. The Public API only knows the keys created through the dashboard or the CLI, so the session path lists those; the Search API lists every key of the engine. The session path also reports no expiry — the Public API serializer hardcodes validity to nil — so VALIDITY shows - there.

Table rendering is now shared by both paths, which fixes a column shift: a key with no description used to render one field short, misaligning every following column.

Requires algolia/AlgoliaWeb#29489 to be deployed. Stacked on #273.

Test

Sign in first, with an application selected:

algolia auth login
algolia application select

List the keys of the current application:

algolia apikeys list

Expect one row per key created by the CLI, with VALIDITY at -. Create one and list again to see it appear:

algolia apikeys create --acl search -d "list check"
algolia apikeys list

Structured output:

algolia apikeys list -o json

Expect an array of objects carrying uuid, value, acl, indexes, referers and created_at.

Error paths:

algolia apikeys list --application-id devDOESNOTEXIST
algolia apikeys list --api-key <non-admin-key>

Expect application devDOESNOTEXIST doesn't exist, or your account doesn't have access to it, then a 403 followed by This API key isn't an admin key.

Admin key path still lists everything, including keys created outside the CLI:

algolia apikeys list --api-key <admin-key>

GROUT-438

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 22 complexity · 137 duplication

Metric	Results
Complexity	22
Duplication	137

View in Codacy

_{TIP This summary will be updated as you push new changes.}

[dylantientcheu]

Nice PR.

I see tests were deleted. The trickiest code in the PR and it's the part that ended up with no tests. Can we restore them?

[LorrisSaintGenez]

@dylantientcheu Didn't want the PR to get too big, and planned on doing a follow-up PR, but will restore them

[LorrisSaintGenez]

Not needed