{% comment %} One-time plaintext-token reveal modal. Rendered server-side immediately after issue. Initialised with ``showRevealModal = true`` in the outer Alpine scope (see ``list.html``). Closing the modal — or even reloading the page — will lose the token forever; we explicitly do NOT persist plaintext anywhere. {% endcomment %}