Move API Key from Contract to Client App

For a variety of reasons, we want to move the API Key from the Contract object to the Client App object. This means that each client will have a single unique key that it uses to access its contracted APIs. It also means that a client app can only create a single Contract per API. However, this change resolves a number of challenges in apiman and simplifies things quite a bit.