[Feature request] Scoped, metadata-only API for AI agents managing collections/groups

Motivation I'd like to let an AI agent help manage my vault organization (grouping collections, cleaning up structures, re-categorizing items). Today the only way to do this programmatically is the admin API, which is all-or-nothing: an agent with access to it can read/export everything. Security concern A vault server holds ciphertext (safe without the master password) but also *plaintext metadata* (item names, URLs, usernames, org/collection/group structure) that is itself sensitive. An agent integrating with a third-party LLM would ship this metadata off-box, and a broad admin token also turns prompt injection into a destructive capability (delete groups, change permissions, export). Proposal Add a scoped agent token / API surface with: 1. Fine-grained scopes (e.g. groups:read, groups:write, collections:read, collections:write) — never including ciphertext read or export. 2. Metadata-only endpoints that never return ciphertext fields, so agents only ever see names/IDs/st…