* Adds TODO for API key rejection
Adds a TODO comment in the recording routes to reject requests that include an API key.
Adds FIXME comments to recording security tests, indicating that the tests do not need to start a recording to check the fail case.
* backend: remove TODO comments for API key rejection in recording routes
* test: enhace recording security tests by only creating necessary recordings
---------
Co-authored-by: Carlos Santos <4a.santos@gmail.com>