Auto-revoke stale API tokens based on organization inactivity threshold

[migmartri]

Organizations should be able to configure an inactivity threshold (in days) for API tokens. Tokens that have not been used within the configured period should be automatically revoked by a background process.