List key scopes

The catalog of scopes a key can be given: one row per resource, with the actions it has. A scope is named resource:action — contacts:read, broadcasts:execute. It is the list the dashboard builds its permission grid from.

Actions: read, create, update, delete; execute where something reaches people outside the account (launching, testing and resending a campaign; triggering, testing and replaying a flow); and write only on graph, the Meta mirror under /v1 beyond sending.