CIDR ranges on API key allowed IP addresses

The Allowed IP Addresses field on an API key only accepts one IP address per line. Please allow CIDR ranges there as well, the same way Admin → Security → IP Access Control already does.

Integrations and automation often call from a published IP range rather than a single address. Listing every address is impractical, and leaving the field blank removes the restriction entirely. CIDR support would let us keep the key limited to that range.