[Catalog] Make an option for Catalog API key to be restricted to specific subcatalog

[rpsloan]

Problem statement:

Currently, when a subcatalog admin requests for an API key for their subcatalog instance, we are unable to provide them that option as giving a Catalog API key cannot be limited to a subcatalog, and instead has access to all Catalog instances.

Proposed solution:

When creating/adding an API key, provide a dropdown that allows the admin to limit/restrict it to a specific subaccount access only. This will allow subcatalog admins who request for API access to only have access to their subcatalog instances.

User role(s):

admin

[KataKeri]

Thanks for the submission. Added to theme.