Tokens — managed asset universe

The catalogue the scanner builds its pair-set from. Add a token, bind it to venues, and flip it ACTIVE to start detection — or INACTIVE / EXCLUDED to stop it. Mutations write to the DB + audit log; the scanner picks up changes on its next cycle (UNI-1).