feat: scoped API tokens

[migmartri]

Makes API token scoping consistent with other resourtes like contracts this means

Creation

• members can create scoped tokens and are forced to provide a project reference
• admins can create either, both global or scoped

Listing

• members now see the tokens associated with any of their projects
• admins can see both global and scoped
• additional filters have been added such as filtering by specific project, show only globals, etc

Revocation

• proper RBAC has been put in place as well

Some important notes

• in order to prevent collisions, we now require passing the token id during revocation, this simplifies the UX in general so we can allow users to create tokens of any name
• the previous project/apitokens service has been removed and replaced by this one.

closes #2241