Validate an import provider token and list its media

Validate an import provider's token and enumerate its media.

Inbound counterpart to ScreenlyValidateTokenViewV2: validation and listing happen in one round-trip so the wizard's Continue button goes straight from the token field to the item picker. The token is not stored; each request forwards it inline. provider is the registry key from the URL (yodeck, later screencloud …).