Track API and app token events in audit logs

Problem
Creation and deletion of API tokens and app tokens are not tracked in the audit log, creating a gap in security visibility.

Request
Log the creation and deletion of all API and app tokens in the audit log so admins can monitor token lifecycle events for security and compliance purposes.