feat: own shared user API tokens

updates/organisations_test.go

@@ -45,6 +45,7 @@ func TestCreateOrganisationsMigration(t *testing.T) {
 		"202609220006_create_user_throttle",
 		"202609220007_create_jwt_blacklist",
 		"202610020001_create_user_groups",
+		"202610040001_create_user_api_tokens",
 	}
 	if len(ids) != len(want) {
 		t.Fatalf("history = %v", ids)
@@ -55,8 +56,8 @@ func TestCreateOrganisationsMigration(t *testing.T) {
 		}
 	}
 
-	// user groups, jwt blacklist, throttle, extend-users, then organisations.
-	for range 5 {
+	// API tokens, user groups, jwt blacklist, throttle, extend-users, then organisations.
+	for range 6 {
 		if err := m.RollbackLast(); err != nil {
 			t.Fatal(err)
 		}