API key vs OAuth: when to use which | AgentChain Academy