Revoke deploy tokens through a per-creator index instead of visiting every repository
Each creator's AccountState records the deploy tokens they made (repository, minting token), so revoking a personal token or a password reset visits only the repositories that can hold one. A cron backfill indexes tokens made before the index existed; until it finishes, revocation keeps the full scan. Assisted-by: Crush
11 files changed+271−38
Rendering diff…