Expose checkApiKey to allow resolving an api key string

This allows for custom api key handlers that don't rely on
`resolveAuthHeader` or `resolveApiKey`

Change-type: minor

Author: Page-

src/sbvr-api/permissions.ts

@@ -1536,7 +1536,7 @@ const getApiKeyActorId = (() => {
 	);
 })();
 
-const checkApiKey = async (
+export const checkApiKey = async (
 	apiKey: string,
 	tx?: Tx,
 ): Promise<PermissionReq['apiKey']> => {