Manage gateway bearer tokens without touching digests by hand.

This Railway service is restricted to verified Google accounts on the @solana.org domain. It issues opaque bearer tokens, stores only SHA-256 digests in Postgres, and records every lifecycle change in audit history.