Scope API access to a single team

Now that everything in the panel is filtered by team, it'd be nice if the API worked the same way. Right now a token is created under your personal profile and reaches every team you're in.

Two ways I could see this working:

Team-scoped tokens: you create a token that belongs to one team, so it only reaches that team's servers, sites, backups, etc. A team filter on requests: keep the token as is, but let me pass a team (e.g. a team ID or header) so I can filter the results to one team.

Why it's useful: for certain projects I only want the servers/websites of one team, not from every team I'm a member of. Being able to scope it makes that a lot cleaner and safer.