Add Modal provider and modal_auth support
Add Modal auth schema and DB migration, and introduce lexicon
fields for modal token id/secret and their redacted variants. Update
CLI, sandbox types, API handlers and web UI to accept and persist
Modal tokens and surface redacted values in responses.