feat: source tokens and client events API

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BCrwHHnGCB5XH968Nxokqw

core/routes/api.php

@@ -0,0 +1,10 @@
+<?php
+
+use App\Http\Controllers\Api\EventsController;
+use Illuminate\Support\Facades\Route;
+
+Route::middleware('auth.source')->group(function () {
+    Route::put('/events', [EventsController::class, 'upsert']);
+    Route::get('/events', [EventsController::class, 'show']);
+    Route::delete('/events', [EventsController::class, 'destroy']);
+});