Required the API token for every runtime API route (#1045)

runtime/Cargo.toml

@@ -33,6 +33,7 @@ axum-server = { version = "0.8.0", features = ["tls-rustls"] }
 rustls = { version = "0.23.45", default-features = false, features = ["aws_lc_rs"] }
 rand = "0.10.2"
 rand_chacha = "0.10.0"
+subtle = "2.6.1"
 base64 = "0.22.1"
 aes = "0.9.1"
 cbc = "0.2.1"
@@ -79,6 +80,10 @@ toml = "1.1.4"
 image = { version = "0.25.10", default-features = false, features = ["jpeg", "png", "webp"] }
 tokenizers = "0.23.1"
 
+[dev-dependencies]
+# Sends requests through the runtime API router in tests, without starting a server.
+tower = { version = "0.5.2", features = ["util"] }
+
 [patch.crates-io]
 # Issue: This repo was not updated since 2020. The rand crate was outdated. We patched it to use a newer version of rand.
 # State: There is a PR for a long time, but it was not merged. We use the git version for now. Qdrant Edge still depends