feat(token): add first command: token

Besides the token command, this includes much of the underlying
design that all commands will build off of.
Also, since typically each oauth-server instance will only work with one auth-server instance, perhaps we can make the auth-server URL discoverable rather than specifying it in config.