Require admin access to regenerate repo key

If someone regenerates key with only push access, someone else with
admin access would have to set up the hook again if it's needed (which
is a problem for private repos)
Allow to get active repos with no builds from the API
Add info about 'active' column when getting repos list