Better security on modal api

[Harrolee]

1. create a keypair
2. put public key in modal secrets
3. have modal check the signature on incoming Authz header

Really, this comes down to learning how to access secrets defined in your Modal env. The example in the docs didn't work. You need to learn why.