Lock an API key

Lock an API key to prevent it from being deleted or modified. Locked keys remain active and can still be used for authentication.