Create a draft SWEEP batch after the structural rights front-door gate.

This bernayser:write call is quota-neutral at creation and cannot enqueue an engine tick. A render sweep without a connection proof receives 422 RIGHTS. render_mode catalog_only builds an index only, can never produce a clip, and needs no proof, but is itself 422 RIGHTS where that mode is not enabled. Malformed inputs receive validation_error and the dark surface is not_found. Add the required proof or fix the body before retrying. The batch starts draft, and only the separate approve operation can move it to approved. Requires the explicitly minted bernayser:write scope; bernayser:read permits safe projections and bernayser:write permits mutations. This BERNAYSER operation is quota-neutral. While dark it returns not_found, and a valid key without the required scope receives scope_missing. Fix a non-retryable request or credential before retrying; for rate_limited or service_unavailable, wait for retry_after_sec and retry once.