OAuth dialog: Show which apps use that scope

[untitaker]

https://community.remotestorage.io/t/making-remotestorage-scopes-more-descriptive-for-end-users/301

[untitaker]

This has become harder with JWT-tokens, but we can still store the union of all permissions ever granted to an app.