[auth][graphql] deleteUserAPIKeys mutation

[axiomofjoy]

mutation deleteUserAPIKeys(keyIds: [String!]!) {
  apiKeys {
    id
    name
  }
}

Only admins and the user who created a key should be able to delete it.

[Parker-Stafford]

closed in #4489