feat: allow API tokens to create organizations

[jiparis]

For faster onboarding scenarios in on-prem installations, we'd like API tokens to be able to create organizations. This would require some other process to add the permission organization:create to specific tokens, since default API tokens don't have it.