[SERV-030] API Access Tokens

[Xflofoxx]

Description

Manage API access tokens for programmatic access.

Requirements

• Create/manage API tokens
• Token expiration
• Token revocation
• Token scope (read/write)

Acceptance Criteria

• Create API tokens
• Set expiration
• Revoke tokens

See: spec/server/SERV-030-api-access-tokens.md