Use TokenRestrictions API for token creation

[simonw]

Refs:

• register_token_handler() plugin hook for custom API token backends datasette#2650 (comment)

This PR updates the token creation logic to use Datasette's TokenRestrictions API instead of manually managing restriction dictionaries.

Summary

Refactored the create_api_token view to leverage the TokenRestrictions class from datasette.tokens, simplifying the code and improving maintainability.

Key changes

• Replaced manual restriction dictionary management (restrict_all, restrict_database, restrict_resource) with TokenRestrictions() instance
• Updated restriction building to use TokenRestrictions methods: allow_all(), allow_database(), and allow_resource()
• Changed datasette.create_token() call to await datasette.create_token() (now async)
• Updated token creation call to pass restrictions parameter instead of individual restriction parameters
• Added .gitignore entries for build/ and dist/ directories

Implementation details

The TokenRestrictions class provides a cleaner API for building token restrictions, eliminating the need for nested dictionary manipulation. The restriction building loop now directly calls methods on the TokenRestrictions instance, making the code more readable and less error-prone.

https://claude.ai/code/session_01RbZveeSogxSnjJ5yr6AFtq

[simonw]

Tests will fail until I release Datasette 1.0a25 and depend on that.