turso auth API tokens support org-wide scopes
When creating an organization-wide token with explicit permissions, run `turso auth api-tokens mint` with `--org` and one or more `--scope` flags, omitting `--group`. Use `group:create`, `group:delete`, or `org:read` only without `--group`; `--full-access` expands to the group-level scope set.
turso auth api-tokens mint <token-name> --org <organization-slug> --scope group:create --scope group:delete --scope org:read