Add `pcsl token list` command — show all active client IDs and scopes

[CodeForgeNet]

Feature request
Add a pcsl token list command that shows all clients that have ever been issued tokens, their requested scopes, and whether they are currently revoked.

Expected output
┌──────────────────┬─────────────────────┬──────────┐
│ Client ID │ Scopes │ Status │
├──────────────────┼─────────────────────┼──────────┤
│ vscode-plugin │ identity, skills │ active │
│ my-claude-ext │ preferences │ revoked │
└──────────────────┴─────────────────────┴──────────┘

Implementation hint

• Derive client list from ~/.pcsl/data/local-user_access_log.json
• Cross-reference with ~/.pcsl/data/local-user_revoked.json
• Add new GET /pcsl/clients endpoint in main.py OR derive entirely client-side from the audit log

Files to change

• pcsl/cli.py — add token_list under token_app
• pcsl/pcsl_server/main.py - optionally add /pcsl/clients endpoint