Adds a per-user table for generating, listing, and revoking named app
passwords from the user edit screen. The plaintext secret is revealed
once in a copy-to-clipboard dialog on creation; subsequent reads return
only metadata (created / last used / expires).