web: API token page, so a web-only user can sign in to the iOS app #264

No web page mints an API token, so a web-only user cannot sign in to the iOS app.

The iOS app signs in with a pasted token, and only the CLI can create one. account.html:192-196 says "No page here yet, and nothing refusing one". Parity lists token mint as web no. Someone who signs up in a browser and never installs the CLI has no way into the app.

• Settings → Tokens: create (name, scope, TTL), shown once on the result page; list with scope, expiry, created and last used; revoke behind the confirmfield typed confirmation keys use.
• Scope default follows #257 (read). The form says a phone app needs full scope to comment and merge, and that full scope on an admin account can administer the instance.
• registered.html:7-10: turn the next steps into a numbered list (copy the code from the mail, sign in, paste it in Settings → Email) and add "Using the iOS app? Create a token in Settings → Tokens".
• Update Parity.

The iOS side (linking to this page from sign-in) is filed in krz/gitbay-ios.