New token form: only templates within what the token's user may do

A token never does more than its user, so offering wider templates only
misled. On the Users page the templates follow the token's user, not the
administrator making it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

CHANGELOG.md

@@ -16,6 +16,9 @@ All notable changes to Jarl are documented here. The format follows
 
 - A linked zone's Compare views tab starts with a view it is linked to,
   not the first other view.
+- The New token form only offers templates within what the token's user
+  may do. A token never does more than its user, so offering more only
+  misled.
 
 ## [0.6.0] - 2026-10-13