feat(token): add first command: token

Besides the token command, this includes much of the underlying
design that all commands will build off of.
The lib code is now expecting these are `fxaUrl` and `oauthUrl`, so it errors out with `missing --fxa` when run with `-e` option.