Least-privilege keys for automated publishing

Automated tools can now be given a key that does exactly one job — draft a post, upload an image, or manage the calendar — instead of all-or-nothing access. Taking a draft live is its own separate permission, so a tool that writes drafts cannot publish them or post to social by itself. Existing keys keep working exactly as before.