stage 1 of oauth removal, switch to sanctum pat tokens

bootstrap/app.php

@@ -1,6 +1,7 @@
 <?php
 
 use App\Http\Middleware\CreditCheckMiddleware;
+use App\Http\Middleware\EnsureTenantAdminToken;
 use App\Http\Middleware\HandleAppearance;
 use App\Http\Middleware\HandleInertiaRequests;
 use App\Http\Middleware\SetLocaleFromUser;
@@ -19,9 +20,6 @@ return Application::configure(basePath: dirname(__DIR__))
         health: '/up',
     )
     ->withCommands([
-        \App\Console\Commands\OAuthRotateKeysCommand::class,
-        \App\Console\Commands\OAuthListKeysCommand::class,
-        \App\Console\Commands\OAuthPruneKeysCommand::class,
         \App\Console\Commands\CheckEventPackages::class,
     ])
     ->withSchedule(function (\Illuminate\Console\Scheduling\Schedule $schedule) {
@@ -29,12 +27,12 @@ return Application::configure(basePath: dirname(__DIR__))
     })
     ->withMiddleware(function (Middleware $middleware) {
         $middleware->alias([
-            'tenant.token' => TenantTokenGuard::class,
             'tenant.isolation' => TenantIsolation::class,
             'package.check' => \App\Http\Middleware\PackageMiddleware::class,
             'locale' => \App\Http\Middleware\SetLocale::class,
             'superadmin.auth' => \App\Http\Middleware\SuperAdminAuth::class,
             'credit.check' => CreditCheckMiddleware::class,
+            'tenant.admin' => EnsureTenantAdminToken::class,
         ]);
 
         $middleware->encryptCookies(except: ['appearance', 'sidebar_state']);