Document setting up `client_credentials` with access tokens scoped to the application

[sjohnr]

We should add a clear example to the reference for setting up an application with the client_credentials grant type. Often, this use case requires access tokens scoped to the application instead of individual users in session.

Related gh-15295