Introduce Organization Access Tokens

[frankie567]

Currently, we have two ways of authenticating through the API:

• Through a Personal Access Token (as a User)
• Through an OAuth2 Access Token (either as a User or as an Organization)

I believe most people integrating Polar use a PAT. The drawback with those is that they have to constantly repeat the organization_id when making requests.

Since most of the integrations are likely targeted at a single Organization, I think it makes sense to introduce Organization Access Tokens, directly generated from the dashboard. The nice thing is that we can completely omit organization_id in all requests with those.

We already have all the machinery to support this in our backend, so this is just a matter of introducing a table and endpoints to generate and store those tokens.