Ghostwriter v7: Safer Tokens, Scoped Access, and Better Automation

Ghostwriter v7.0.0 modernizes authentication and automation by replacing user-managed JWTs with opaque Ghostwriter Access Tokens (gwat_ prefix), introducing scoped service principals and opaque service tokens (gwst_ prefix) with hashed secrets, expirations, revocation, and last-used tracking, and enabling narrowly scoped permissions for non-human integrations (including operation-log–scoped tokens and project read-only tokens). The release aims to simplify token lifecycle management (rotating credentials on expiry changes), improve UX for token management, and provide safer paths for LLM-driven workflows and oplog utilities; existing tokens must be rotated after upgrade.