`hk authorize`: two factor support for paranoid/privileged actions

As originally described by the design in #171, implements a command called `hk authorize` that uses heroku-agent to procure and store a token that will bypass two factor checks on paranoid apps and other privileged actions for a short period of time.

Here's a sample interaction (slightly sanitized):

``` bash
$ hk env -a paranoid
error: A second authentication factor or pre-authorization is required for this request. Your account has either two-factor or a Yubikey registered. Authorize with `hk authorize`.

$ hk authorize
Enter two-factor auth code: ccccccdlnndfutjnddejbcceriigfjjbvulurgntjvum
Authorization successful.

$ hk env -a paranoid
RACK_ENV=production
```

Fixes #171.
Not sure about the order here. I think we made a vague attempt to put common/important commands at the top of this list, but who knows. It certainly wasn't based on any evidence or even particularly careful thought on my part. Also, if ~100% of users (aka all non-Herokai) won't ever run this command, maybe it should be kept out of the list or put in the "extra" list (or pulled into a plugin)?