cli: avoid data-dir initialization for version; create db parent dirs; redact generated passwords in CLI output

- Prevent 'nx9-wg version' from creating data directories by avoiding database initialization.
- Create parent directories when an explicit --database path is provided.
- Redact printed generated administrator passwords; announce file path or redact instead.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

crates/nx9-wg-api/Cargo.toml

@@ -0,0 +1,28 @@
+[package]
+name = "nx9-wg-api"
+description = "Axum REST API, application services, and WebSocket server for nx9-wg"
+version.workspace = true
+edition.workspace = true
+
+[dependencies]
+nx9-wg-core.workspace = true
+nx9-wg-db.workspace = true
+nx9-wireguard.workspace = true
+nx9-wg-network.workspace = true
+nx9-wg-ui.workspace = true
+axum.workspace = true
+tower.workspace = true
+tower-http.workspace = true
+tokio.workspace = true
+serde.workspace = true
+serde_json.workspace = true
+chrono.workspace = true
+uuid.workspace = true
+tracing.workspace = true
+thiserror.workspace = true
+ipnet.workspace = true
+sha2.workspace = true
+futures-util = "0.3"
+
+[dev-dependencies]
+tempfile.workspace = true