Fix CLI-created API keys returning 401 permission denied

[aaronbrethorst]

Summary

• Fix doCreate() in ApiKeyCliMain passing incorrect arguments to getOrCreateUserForIndexKey(): empty string for credentials and true for isAnonymous, causing keys to be created with ROLE_ANONYMOUS instead of ROLE_USER
• Pass the actual key value and false to match the working pattern in CreateApiKeyAction
• Update test mock expectations to verify the corrected arguments

Fixes #455

Test plan

• All 48 tests in onebusaway-api-key-cli pass
• Create an API key via CLI and verify it returns 200 instead of 401 against the API

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}