fix: prevent access token list duplication

[fzlzjerry]

Summary

• merge personal access token state by stable token ID across API data, session storage, and cross-hook events
• preserve separately created token types that do not expose a fingerprint
• unsubscribe token event listeners when hook consumers unmount
• add lifecycle regression coverage for navigation remounts and distinct newly created tokens

Fixes l3montree-dev/devguard#2803.

Validation

• npm test -- --runInBand (8 suites, 34 tests)
• npx tsc --noEmit --pretty false
• npx prettier --check src/hooks/usePersonalAccessToken.ts src/hooks/usePersonalAccessToken.test.tsx
• git diff --check

The npm, Jest, TypeScript, and formatting checks were run with Node 26.5.0 and npm 11.17.0, matching the repository's declared engine range.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[juliankepka]

Hello @fzlzjerry, thank you for opening this pull request! Unfortunately, while working on a related issue I ended up fixing this one along the way, so I'll have to close your PR here.

I appreciate the effort you put in. If you're up for it, feel free to take a look at the newly opened tickets. There might be a next task waiting for you there. Thanks again, and happy to have you contributing! :)