Feature request: Allow passing Electric secret via an HTTP header

**Is your feature request related to a problem? Please describe.**

Having the secret as a path parameter might expose it to access logs.

**Describe the solution you'd like**
One can provide the secret via a request parameter or a request header (`X-Electric-Secret`).

**Additional context**

https://electric.ax/docs/sync/guides/security#api-token