Migration scripts need to remove scope mappings for cli and console clients

When Keycloak is upgraded from 3.1.1.Final to 3.2.1 Final, it is still generating long OAuth tokens (token length is proportional to number of realms) and identified the root cause of the issue is: scopes are not removed from "admin-cli" and "security-admin-console" OIDC/OAuth clients during the up-grdation process. This manual effort is not documented in the migration guide either (http://www.keycloak.org/docs/latest/server_admin/topics/MigrationFromOlderVersions.html)