Extracts an API key from a specific HTTP request header. By default, the header name
is {@code X-Api-Key}. If the header is present, its first value is returned as the API key.
Example usage inside {@code <apiKey>}:
<apiKey>
<headerExtractor />
<headerExtractor name="Authorization"/>
</apiKey>