Move all inline add and create interactions into modals

Summary

Audit page-level “add” and “create” boxes—such as Create token and Add passkey—and replace inline forms with modal flows. Pages that list or manage existing items should not also expose an expanded inline creation box.

Acceptance criteria

• Audit every application page for inline add/create forms, including token creation and passkey registration.
• Each add/create trigger opens a shared modal flow instead of expanding or permanently rendering a form inline on the page.
• Existing validation, loading, success, error, and one-time-secret behavior is preserved.
• Successful submission closes the modal and refreshes the relevant page state.
• Cancelling or closing a modal makes no data change and restores focus to the trigger.
• Modals support initial focus, keyboard navigation, Escape to close, and accessible names.
• Styling and behavior reuse the documented shared modal and form patterns in light and dark modes.
• Add rendering and interaction regression coverage for each migrated flow.