#143: set tok_<id> cookie in create handlers so the created banner can show the token (QA)

internal/api/attachments.go

@@ -242,6 +242,7 @@ func (a *apiServer) handleCreatePasteMultipart(w http.ResponseWriter, r *http.Re
 		return
 	}
 
+	setDeletionTokenCookie(w, created.ID, created.DeletionToken) // #143
 	resp := map[string]any{
 		"id":             created.ID,
 		"deletion_token": created.DeletionToken,