Create your first API key using a Supabase Bearer access token. Solves the chicken-and-egg problem where POST /v1/keys requires an existing key. Returns 400 if you already have API key(s).
Supabase access_token from polysimulator.com sign-in. Used only for POST /v1/keys/bootstrap.