feature: Improve UX when APIBinding contains pending permission claims

[lionelvillard]

Feature Description

I'm always frustrated when I create an APIBinding there is no clear indication there are pending claims and that there is no easy way to accept all claims.

Proposed Solution

• Add a new "Pending" claim state
• Print current status on claims when entering a workspace (already supported)
• Print message when kcp bind apiexport has permission claims
• For accepting claims:
  • at binding time: provide CLI flags (--accept-all-claims, --accept-claim GR [identityhash], --interactive)
  • after binding: provide CLI command (eg. kcp claims accept|reject [GR [identityhash]] [--all] [--interactive])

Alternative Solutions

No response

Want to contribute?

• I would like to work on this issue.

Additional Context

No response