Release 1.6.0 — 21 write tools + scope enforcement fix New tools (all Free, no Pro split): - CoreModule: createNode, updateNode, deleteNode, publishNode, createComment, updateComment, deleteComment - TaxonomyModule: createTaxonomyTerm, updateTaxonomyTerm, deleteTaxonomyTerm - UserModule: createUser, updateUser, blockUser, unblockUser - FileModule: uploadFile (base64, 10 MB cap) - MediaModule: createMedia, updateMedia, deleteMedia - StructureModule: createMenuLink, updateMenuLink, deleteMenuLink Security fixes: - ToolsController: scope enforcement was completely missing from the executeQuery() route (the one actually advertised as tools_endpoint in the manifest). A read-only token could call any write/delete tool. - GenerateTokenController: hardcoded ['read','write'] scopes meant admin users connecting via goldnat.ai never received delete scope. - OAuthController/OAuthService: admin users now automatically receive delete scope on both initial grant and refresh-token flows. Also fixed: - ManifestService: version was hardcoded; now derived from ModuleExtensionList so info.yml and manifest always agree. 50 tools total (29 read + 16 write + 5 delete). Tested end-to-end with real AI agent via goldnat.ai capability tests.