Encrypt third-party tokens even when the database is private

CompanyCam OAuth tokens grant access to someone else's account, so a database dump is not just your problem. Fernet encryption at rest means a leaked backup is inert, and the cost is one wrapper on read and write.