Add `whoami`-endpoint

[christian-monch]

Add an endpoint that can report on token properties:

1. access-rights per collection
2. inbox name

Possibly reports on:

1. team membership in case of Forgejo-authentication source