v2.59.4

• 2.59.4 — 🔑 Scoped API tokens. Outside programs (like a local
  assistant on the same PC) can now use Verdant's API with a bearer token
  instead of poking the database directly. Create one on the Settings page
  with exactly the scopes it needs (*, read, or per-domain write
  scopes); the secret is shown once and only its hash is stored. Requests
  without a token work exactly as before — the web UI is untouched.