cloudflare.md token permissions

Document Cloudflare API permissions in Craft's existing docs/src/content/docs/targets/cloudflare.md page, not in getsentry/publish or a duplicate page. Chose mode-specific account permissions over a broad combined permission set because deployType: worker needs Account → Workers Scripts → Edit, while deployType: pages needs Account → Cloudflare Pages → Edit; a token serving both modes needs both. User, zone, billing, account-settings, and unrelated read permissions are unnecessary.