phabricator: kill PhabricatorLister's api_token argument
stick to the existing credentials mechanism provided by ListerHttpTransport.