Improve API token display: Mask tokens by default, showing full token on click, and update status on revoke.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: 9111ef36-26c8-4085-84ca-a35dc1fec1b5
Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/7083d608-d6d3-4a6a-9a27-6286c5109627/5cef4e90-f284-4e53-bf77-324afb650f2b.jpg

client/src/pages/api-tokens.tsx

@@ -345,7 +345,7 @@ export default function ApiTokensPage() {
                   <TableRow key={token.id}>
                     <TableCell className="font-medium">{token.name}</TableCell>
                     <TableCell className="font-mono text-xs">
-                      {token.token.substring(0, 8)}...
+                      {"*".repeat(16)}
                     </TableCell>
                     <TableCell>
                       <Badge variant="outline" className="text-xs capitalize">
@@ -785,7 +785,7 @@ export default function ApiTokensPage() {
                 <div className="bg-muted p-4 rounded-md relative">
                   <div className="font-mono text-sm break-all">
                     {viewingFullToken ? selectedToken.token : (
-                      selectedToken.token.substring(0, 8) + '...' + selectedToken.token.substring(selectedToken.token.length - 8)
+                      "*".repeat(32)
                     )}
                   </div>
                   <Button