API Tokens

Method	Path	Description
POST	/v1/tokens	Create a scoped API token (raw token returned once)
GET	/v1/tokens	List tokens (metadata; token value masked)
DELETE	/v1/tokens/{id}	Revoke a token