Make more OAuth2.0 APIv3 requirement more prominent

* Also mention that we no longer issue new keys for APIv2.
Perhaps add code markers (backticks) around `your_access_token_here`?