At present, the AccessGrantClient.query() method has an agent parameter, which refers to the recipient of an access credential, but there is no way to query based on creator. This PR introduces an additional parameter so that one can query for creator and/or recipient.

Note: this also moves the resource URI to the first position in the new ::query API (to be introduced in Beta3), as this property is anticipated to be null less often.