Add API token roles and separate them from users.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: 9111ef36-26c8-4085-84ca-a35dc1fec1b5
Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/7083d608-d6d3-4a6a-9a27-6286c5109627/960c4ce7-993c-4ccb-b1e1-47068c824af5.jpg

shared/schema.ts

@@ -85,6 +85,7 @@ export const apiTokens = pgTable("api_tokens", {
   token: text("token").notNull().unique(),
   organizationId: uuid("organization_id").notNull().references(() => organizations.id, { onDelete: "cascade" }),
   permissions: text("permissions").array(),
+  role: text("role").default("readonly").notNull(), // Adding explicit role like users have
   createdBy: uuid("created_by").notNull().references(() => users.id, { onDelete: "cascade" }),
   isActive: boolean("is_active").default(true).notNull(),
   createdAt: timestamp("created_at").defaultNow().notNull(),
@@ -206,6 +207,7 @@ export const insertApiTokenSchema = createInsertSchema(apiTokens).pick({
   token: true,
   organizationId: true,
   permissions: true,
+  role: true,
   createdBy: true,
   isActive: true,
   expiresAt: true,