Use scopes when creating new API keys

[satterly]

Replace drop-down with only three scope aliases "admin", "read-write" and "read-only" ...

... with ability for fine-grained control over scopes ...

old	new
admin	admin
read-write	read write
read-only	read