[V2] --access-token should be optional to sso calls

aws sso login creates a cache files in ~/.aws/sso/cache which contains an access token
aws sso list-accounts and list-account-roles requires an access-token.

It would be helpful to have a mechanise to either output the current valid access token or make the argument optional and use the cached value for the current context.