Inefficient and insecure API key lookup in get_api_key_by_value

Inefficient lookup

- The current implementation fetches all active API keys from the database and decrypts them one by one in Python.
- This approach does not scale for large systems (millions of API keys).
- API keys should be stored hashed (similar to passwords), not encrypted + decrypted for comparison.