Scoped tokens that still obey your permissions
Requests are checked for the required scope, rate-limited, and executed as the owning user, so the extension can never see more than the person using it. The token lives where only the background worker can read it.
