use type password on api key input

[zuramai]

API Key is a confidential data that should not be shown publicly, especially when we want to record the screen while trying to copy-paste the API Key to the website.

[vercel]

@zuramai is attempting to deploy a commit to the tldraw Team on Vercel.

A member of the Team first needs to authorize it.

[TodePond]

Hey we tried this, but it was causing some password managers to mess up and think that some text shapes were also passwords (for some reason). I can give it another test

[zuramai]

Hi @TodePond, how about blurring the input text like this?

[brunubarbosa]

it's not a problem when recording the screen since the password is not shown when the input is not focused and when focused it shows just part of the key, maybe just show even less?
Also, something I'd add to it a visual feedback indicating it has a key added (since the same UI is shown in both cases)

[steveruizok]

Addressed! Sort of. I think we'll do a big CTA and show a modal or something for the api key.