feat(16.3-01): account token API with OpenAPI and phrase keys

- Add list/create/revoke/scopes handlers, validation, and soft revoke
- Regenerate admin OpenAPI and TS types; inventory and conformance cases
- Add server-side api_tokens phrase keys (en/pl)

Co-authored-by: Cursor <cursoragent@cursor.com>

modules/cabana/export_test.go

@@ -22,6 +22,6 @@ func AdminAPIRoutes() []string {
 // scopes and optional expiry. Used by external Postgres smoke tests before
 // the HTTP create route exists.
 func IssueTestAPIToken(db *gorm.DB, ownerID uint, scopes []string, expiresAt *time.Time) (plain string, err error) {
-	plain, _, err = issueAPIToken(db, ownerID, "test", scopes, expiresAt)
+	plain, _, err = insertAPIToken(db, ownerID, "test", scopes, expiresAt)
 	return plain, err
 }