Only expose `id` and `name` attributes when serializing deploy token

To improve security. Previously we were exposing `token` and
`encrypted_token` attributes.

Changelog: security