feat: allow an API token to be restricted to servers by tag

server/internal/api/tokens.go

@@ -110,7 +110,7 @@ func createToken(c *gin.Context) {
 
 	tok, plaintext, err := services.CreateAPIToken(
 		auth.InstanceID(c), auth.UserID(c),
-		body.Name, body.Role, body.Scopes, body.ExpiresInDays, c.ClientIP(),
+		body.Name, body.Role, body.Scopes, nil, body.ExpiresInDays, c.ClientIP(),
 	)
 	switch {
 	case errors.Is(err, services.ErrTokenNameTaken):