chore: Prepare Token 1.8.0

[Priveetee]

Summary

• prepare Token version 1.8.0
• retain the bounded WEB and MWEB playback-identity recovery used by the release

Production behavior

When YouTube rejects a cached anonymous playback identity, Token rotates the identity once and retries with fresh visitor and PO-token material without unbounded retries.

Deployment requirements

Publish the Token 1.8.0 image from main and pin the production token service to its immutable digest. No configuration or database migration is required.

Runtime verification

• /health is healthy after rollout.
• A representative WEB or MWEB token request returns successfully.
• A rejected cached identity is invalidated and retried at most once.

Tests

• bun install --frozen
• bun test
• bun run lint
• bun run typecheck
• bun run build
• git diff --check

Rollback

Restore the previous Token image digest and the previous Token submodule revision, then recreate only typetype-token.