API token: add bot type

currently all api tokens are generated by the user either manually via WebUI or via API.

I want to add a type information so e.g. bots or CI tools can create short lived tokens (based on  #32358 ) that dont show in the webui by default. so it's not clustered. (we still should allow on explizite request to view and delete them)