feat(token): add first command: token

Besides the token command, this includes much of the underlying
design that all commands will build off of.
I just cut browserid-crypto v0.7.0 which has all the new-format stuff removed, and should be compatible-by-default with what's deployed in FxA.