fix(orgtoken): sync test mocks with actual query column count
Real Validate() query: SELECT id, prefix, org_id FROM org_api_tokens
Real List() query: SELECT id, prefix, name, org_id, created_by, created_at, last_used_at FROM org_api_tokens
Fixes:
- TestValidate_HappyPath: add org_id to mock row (was 2 cols, query returns 3)
- TestList_NewestFirst: fix column list AND AddRow calls to match List() query
(7 columns: id, prefix, name, org_id, created_by, created_at, last_used_at)
This resolves the Platform (Go) CI failure blocking all molecule-core PRs.
Ref: pre-existing failure, unrelated to F1085 security fix.