Unify nav: drop Profile nav item, fold API Tokens into Profile page

- Nav bar already showed the logged-in user's name linking to /profile
  (cl-username); just removed the separate "Profile" and "API Tokens"
  nav items now that Profile covers both.
- Merge api_tokens.ejs into profile.ejs as a section below the existing
  profile card. /api-tokens 301-redirects to /profile.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

nodejs/routes/render.js

@@ -62,8 +62,9 @@ router.get('/profile', async function(req, res, next) {
   res.render('profile', {...values});
 });
 
-router.get('/api-tokens', async function(req, res, next) {
-  res.render('api_tokens', {...values});
+// API Tokens is now a section on the Profile page.
+router.get('/api-tokens', (req, res) => {
+  res.redirect(301, '/profile');
 });
 
 // Bare /login (the OIDC callback redirect target) and /login/<path>.