Add API tokens, CLI server API and shared core crate

- Personal API tokens (full/read scope, expiry, revoke) and CLI password login
- Cargo workspace: codecraft-core (types, providers, permission rules) shared by
  server and the upcoming terminal client; server re-exports the old paths
- CLI server API: /cli/config, /cli/skill, /cli/tool (server MCP tools),
  /llm/stream model gateway with budgets and usage per user
- Theme/language preferences mirrored to the server; personal memory endpoint
- Statistics: provider and mode tables stacked; CLI usage labelled
- cli/: work in progress (terminal client is being rewritten as a local TUI)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

server/src/mcp.rs

@@ -640,6 +640,9 @@ impl Tool for McpCall {
 
 /// The session owner (MCP access is decided per user).
 fn owner(ctx: &ToolCtx) -> Option<crate::store::User> {
+    if let Some(id) = &ctx.owner_id {
+        return ctx.app.store.user(id).ok().flatten();
+    }
     let s = ctx.app.session(&ctx.session_id).ok()?;
     ctx.app.store.user(s.owner_id.as_deref()?).ok().flatten()
 }