Add API tokens, CLI server API and shared core crate

- Personal API tokens (full/read scope, expiry, revoke) and CLI password login
- Cargo workspace: codecraft-core (types, providers, permission rules) shared by
  server and the upcoming terminal client; server re-exports the old paths
- CLI server API: /cli/config, /cli/skill, /cli/tool (server MCP tools),
  /llm/stream model gateway with budgets and usage per user
- Theme/language preferences mirrored to the server; personal memory endpoint
- Statistics: provider and mode tables stacked; CLI usage labelled
- cli/: work in progress (terminal client is being rewritten as a local TUI)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

web/src/styles.css

@@ -3040,3 +3040,17 @@ button.danger-solid {
   color: var(--red);
   animation: glow 1.2s ease-in-out infinite;
 }
+
+.token-value {
+  word-break: break-all;
+  background: var(--bg0);
+  padding: 4px 8px;
+  border-radius: 6px;
+  flex: 1;
+}
+.token-example {
+  margin: 8px 0 0;
+  white-space: pre-wrap;
+  word-break: break-all;
+  font-size: 12px;
+}