Fix account token failure notices

[yvette-carlisle]

Summary

• Route Codex account token/usage failures into the operator notice dock instead of inline account-row note text.
• Reuse the account privacy toggle for failure copy so hidden-email mode also redacts emails in notices.
• Keep the account table focused on compact status while preserving failed-refresh visibility.

Validation

• cargo test -p decodex operator_dashboard_account
• cargo make fmt-check
• Browser fixture: failed account notice redacts email after toggling account privacy, while the row keeps only Refresh failed status.