CREATE TABLE IF NOT EXISTS api_tokens (
  id           uuid        PRIMARY KEY DEFAULT gen_random_uuid(),
  api_user_id  uuid        NOT NULL REFERENCES api_users (id) ON DELETE CASCADE,
  token_hash   text        NOT NULL,
  scopes       text[]      DEFAULT '{}',
  expires_at   timestamptz,
  created_at   timestamptz DEFAULT now()
);