c35b2ce8c2
* feat(tokens): create embed-specific tokens * fix(tokens): repo functions and policy sketch * chore(authz): embed token policies and tests * chore(authz): fine * chore(gql): lint descriptions * fix(embedTokens): better api surface, repo structure * chore(embedTokens): test fixes * fix(embeds): check resource access * fix(embeds): use resource access util * fix(embedTokens): paginate tokens, emit policy checks * fix(embeds): better query typing * chore(embeds): rename property