feat(16.3-01): account token API with OpenAPI and phrase keys

- Add list/create/revoke/scopes handlers, validation, and soft revoke
- Regenerate admin OpenAPI and TS types; inventory and conformance cases
- Add server-side api_tokens phrase keys (en/pl)

Co-authored-by: Cursor <cursoragent@cursor.com>

modules/cabana/security_coverage_test.go

@@ -42,6 +42,10 @@ var phase09Routes = []adminRoute{
 	{key: "PUT /account"},
 	{key: "POST /account/avatar"},
 	{key: "DELETE /account/avatar"},
+	{key: "GET /account/tokens"},
+	{key: "POST /account/tokens"},
+	{key: "GET /account/tokens/scopes"},
+	{key: "DELETE /account/tokens/{id}"},
 	{key: "GET /navigation"},
 	{key: "GET /field-types"},
 	{key: "GET /settings"},