Read-only api key permission?

### What problem will this feature address?

Current API keys can do a lot of destructive or maybe editing things. Could we limit read-only API keys to read only deployment logs?

### Describe the solution you'd like

Implement a key permission system

### Describe alternatives you've considered

No.

### Additional context

_No response_

### Will you send a PR to implement it?

Yes