fix: register taas.autorouter.lastRoute under operator.read scope (#9)

Without an explicit scope, the gateway auth path defaults plugin RPC methods to operator.admin (see method-scopes.ts:authorizeOperatorScopesForMethod). That blocked the Studio (which connects with operator.read+write but not admin) and CLI calls from invoking the method. Setting opts.scope=operator.read makes the read-only autorouter lookup available to any Studio operator.

Co-authored-by: cloudsigma <cloudsigma@snowcrash.tail77dc93.ts.net>

Author: rjcloudsigma

index.ts

@@ -872,7 +872,8 @@ export default {
 					directSessionId ?? resolveSessionId(workspaceDir).sessionId
 				const captured = getLastRouteForSession(resolvedSessionId)
 				respond(true, { sessionId: resolvedSessionId, capture: captured })
-			}
+			},
+			{ scope: "operator.read" }
 		)
 	},
 }