[Bug]: Cannot rotate token as non-admin user

[jvstme]

Steps to reproduce

1. Log in to dstack Sky as a non-admin user
2. Open https://sky.dstack.ai/users/<your-username>/edit
3. In the "Token" section, click "Rotate"
4. In the confirmation window, click "Rotate"

Actual behaviour

The API response is 403 {"detail":{"msg":"Access denied","code":null}}

Expected behaviour

The token is rotated

dstack version

0.18.6

Server logs

No response

Additional information

Apart from dstack Sky, this is probably also relevant for dstack OSS (via API) and dstack Enterprise (via UI).