Required the API token for every runtime API route (#1045)

runtime/Cargo.lock

@@ -4299,6 +4299,7 @@ dependencies = [
  "serde_json",
  "sha2 0.11.0",
  "strum_macros",
+ "subtle",
  "symphonia",
  "sys-locale",
  "sysinfo",
@@ -4316,6 +4317,7 @@ dependencies = [
  "tokio",
  "tokio-stream",
  "toml 1.1.4+spec-1.1.0",
+ "tower",
  "webkit2gtk",
  "webm-iterable",
  "whoami",