Add passkey auth

As this can enable and disable the alarm without any code, we should have some sort of security on the addon to prevent connecting via websockets and messing around.

Set a config option for a user definable passkey which will be required in the Authorization header as a bearer token.

Integration will also need an update to support this.