Fix tenant event form package selector so it no longer renders empty-value options, handles loading/empty

states, and pulls data from the authenticated /api/v1/tenant/packages endpoint.
    (resources/js/admin/pages/EventFormPage.tsx, resources/js/admin/api.ts)
  - Harden tenant-admin auth flow: prevent PKCE state loss, scope out StrictMode double-processing, add SPA
    routes for /event-admin/login and /event-admin/logout, and tighten token/session clearing semantics (resources/js/admin/auth/{context,tokens}.tsx, resources/js/admin/pages/{AuthCallbackPage,LogoutPage}.tsx,
    resources/js/admin/router.tsx, routes/web.php)

app/Http/Resources/Tenant/EventJoinTokenResource.php

@@ -36,11 +36,14 @@ class EventJoinTokenResource extends JsonResource
             ])
             : null;
 
+        $plainToken = $this->resource->plain_token ?? $this->token;
+
         return [
             'id' => $this->id,
             'label' => $this->label,
-            'token' => $this->token,
-            'url' => url('/e/'.$this->token),
+            'token' => $plainToken,
+            'token_preview' => $this->token_preview,
+            'url' => $plainToken ? url('/e/'.$plainToken) : null,
             'usage_limit' => $this->usage_limit,
             'usage_count' => $this->usage_count,
             'expires_at' => optional($this->expires_at)->toIso8601String(),