Restrict what a public API key can reach

Public API keys, like the one in a website widget, can now be limited to specific channel ids and addon names, so the key can't be used to reach knowledge meant for other channels. Set it per key on the Addons page - how it works.