Allow users with an active application grant to access a script.

Authentication: JWT token required Authorization: Admin level access required (ADMIN or SUPERADMIN)

Request Schema:

{"app_key": "avoided_emissions"}

app_key must be a known gated application, or null to clear it.

Behavior:

• Additive: users with an active grant for app_key may access the script in addition to any existing role/user allowlists, which are unchanged.
• Does not change the script's public or restricted flags.

Error Responses:

• 400 Bad Request: Missing or unknown app_key
• 401 Unauthorized: JWT token required
• 403 Forbidden: Admin privileges required
• 404 Not Found: Script does not exist