fix: correct user:* scope typo (#26049)

The wildcard entry in `externalLowLevel` was `"user.*"` (period) instead
of `"user:*"` (colon). Every other entry uses the `resource:action`
colon convention, and `parseLowLevelScope` rejects the period form, so
the wildcard was silently dropped from `ExternalScopeNames()` and could
not be requested via `coder tokens create --scope=user:*`.

Closes https://github.com/coder/coder/issues/25623

coderd/rbac/scopes_catalog.go

@@ -44,7 +44,7 @@ var externalLowLevel = map[ScopeName]struct{}{
 	"user:read":            {},
 	"user:read_personal":   {},
 	"user:update_personal": {},
-	"user.*":               {},
+	"user:*":               {},
 
 	// User secrets
 	"user_secret:read":   {},