pub fn validate_api_key(api_key: &str, state: &ApiState) -> bool
Validate API key (if authentication is enabled)