scope needs additional data in order to properly scope the method call

[dustmop]

TODO from dispatch PR: https://github.com/qri-io/qri/pull/1653/files
// TODO(dustmop): Add user authentication, profile, identity, etc

The scope struct in lib/scope.go should also include information about the caller making the request. As a first adopter of this change, code that users the "Owner" of the profileStore should instead be getting the "owner" from scope.