fix(security): enforce team access on mutable actions

Authorize cloud provider token access, audit sensitive operations, and
standardize public IDs across deployment and resource flows.

app/Livewire/Security/CloudProviderTokenForm.php

@@ -54,7 +54,6 @@ class CloudProviderTokenForm extends Component
                 $response = Http::withHeaders([
                     'Authorization' => 'Bearer '.$token,
                 ])->timeout(10)->get('https://api.hetzner.cloud/v1/servers');
-                ray($response);
 
                 return $response->successful();
             }
@@ -85,6 +84,13 @@ class CloudProviderTokenForm extends Component
                 'name' => $this->name,
             ]);
 
+            auditLog('ui.cloud_token.created', [
+                'team_id' => currentTeam()->id,
+                'cloud_token_uuid' => $savedToken->uuid,
+                'cloud_token_name' => $savedToken->name,
+                'provider' => $savedToken->provider,
+            ]);
+
             $this->reset(['token', 'name']);
 
             // Dispatch event with token ID so parent components can react