fix: use host token for management if it's provided

Fixes #499

src/cli/src/server/basis.rs

@@ -425,6 +425,7 @@ impl Basis {
         self.start_tunnel(
             locator.clone(),
             &persisted,
+            self.client.clone(),
             LookupAccessTokenProvider::new(
                 self.client.clone(),
                 locator,
@@ -592,9 +593,15 @@ impl Basis {
             cluster: cluster.to_string(),
         };
 
+        let mut mgmt = new_tunnel_management(self.client.user_agent());
+        mgmt.authorization(tunnels::management::Authorization::Tunnel(
+            host_token.to_string(),
+        ));
+
         self.start_tunnel(
             tunnel_details.locator(),
             &tunnel_details,
+            mgmt.into(),
             StaticAccessTokenProvider::new(host_token.to_string()),
         )
         .await
@@ -604,10 +611,10 @@ impl Basis {
         &mut self,
         locator: TunnelLocator,
         tunnel_details: &PersistedTunnel,
+        client: TunnelManagementClient,
         access_token: impl AccessTokenProvider + 'static,
     ) -> Result<BasisTunnel, AnyError> {
-        let mut manager =
-            BasisTunnelManager::new(self.log.clone(), self.client.clone(), locator, access_token);
+        let mut manager = BasisTunnelManager::new(self.log.clone(), client, locator, access_token);
 
         let endpoint_result = spanf!(
             self.log,