Add prefix to OAuth access and refresh tokens

Similarly to adding prefix to Personal Access tokens in #21972 (closed), we should add a prefix to OAuth access and refresh tokens. This will provide the following benefits:

• easier secret detection
• tokens can be routed by their prefix in the Topology Service for Cells 1.0