fix: correct token_prefix comment to match implementation (12 chars)

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>

app/api/api_tokens.py

@@ -131,7 +131,7 @@ async def create_token(
     """
     plaintext = generate_api_token()
     token_hash_value = hash_token(plaintext)
-    prefix = plaintext[:12]  # "de_" + first 9 random chars
+    prefix = plaintext[:12]  # "de_" prefix + 9 random chars = 12 chars total
 
     db_token = ApiToken(
         owner_id=owner_id,

app/models.py

@@ -627,7 +627,7 @@ class ApiToken(Base):
     # SHA-256 hex digest of the full token value
     token_hash = Column(String(64), nullable=False, unique=True, index=True)
 
-    # First 8 characters of the token for display (e.g. "de_Ab3xY…")
+    # First 12 characters of the token for display (e.g. "de_Ab3xY7kL…")
     token_prefix = Column(String(16), nullable=False)
 
     # Usage tracking