document `api-key:<api-key>` basic auth

[aviau]

We should document that the generate endpoint supports basic auth using api-key as the username. This can be used as a workaround for many third-party systems.