chore: add auth for api v2/listen

[nquang29]

#1236

[beastoin]

1/ app changes look bad, just simple as adding the header to all /listen request (you could ask Duong for more help)
2/ backend needs the backward compatible, v3/ pls

@nquang29 fighting

[beastoin]

context: we dont need to protect the v2/ because it will add the high level of complexity to the codebase. just launch the new v3/ then deprecate the v2/ someday.

[nquang29]

@beastoin pls help me review again

[beastoin]

lgtm @nquang29 🥳