feat: allow api-keys be validated

[guenhter]

Hi,

it would be nice to have a opt-in for api-keys, so that the aimock rejects requests which not have the proper api-key set.
This is useful for negative tests where requests should get rejected if they provide the wrong key.