Why do I need a token for cli ?? when creating a new project ??

If your using the cloud based state storage you need a token to login to that. You can use other state systems as well, see https://www.pulumi.com/docs/iac/cli/commands/pulumi_login/

so by default pulumi cli uses cloud based storage ?

yes