docs(cloudflare): document API Key requirement for api_token_ip_restriction_enabled check

docs/user-guide/providers/cloudflare/authentication.mdx

@@ -30,6 +30,18 @@ Prowler requires read-only access to Cloudflare zones and their settings. The fo
 Ensure the API Token has access to all zones targeted for scanning. Missing permissions may cause some checks to fail or return incomplete results.
 </Warning>
 
+### Checks Requiring API Key and Email Authentication
+
+Some Cloudflare API endpoints are restricted to user-level authentication and cannot be accessed with scoped API Tokens. The following checks require [API Key and Email](#api-key-and-email-legacy) authentication:
+
+| Check | Description |
+|-------|-------------|
+| `api_token_ip_restriction_enabled` | Verifies that API tokens have client IP address filtering configured |
+
+<Note>
+When using API Token authentication, these checks are automatically skipped without affecting the rest of the scan.
+</Note>
+
 ---
 
 ## API Token (Recommended)

prowler/providers/cloudflare/services/api/api_token_ip_restriction_enabled/api_token_ip_restriction_enabled.metadata.json

@@ -32,5 +32,5 @@
   ],
   "DependsOn": [],
   "RelatedTo": [],
-  "Notes": "API tokens can have both allow lists and deny lists for IP filtering."
+  "Notes": "API tokens can have both allow lists and deny lists for IP filtering. This check requires API Key and Email authentication because the Cloudflare API does not expose user token listing to scoped API Tokens."
 }