docs: Crowdin source upload token lacks endpoint scope

[taliesin-ai]

Evidence

Upload Source Documents run 31929914829 failed on master after documentation PR #5984 merged. Every Crowdin upload returned:

Permission error: "Endpoint isn't allowed for token scopes."

The workflow exhausted the source-file set and exited 201. Duplicate open and closed issue searches for the workflow name, Crowdin, endpoint scope, and permission text found no existing tracker.

Impact

Source-document changes are not reaching Crowdin, so translation inputs can drift from master while ordinary documentation merges appear successful. This blocks evidence for the Beta 3 documentation/translation gate; it is not evidence that already-published English documentation failed.

Acceptance criteria

• Identify whether the Crowdin token, project role, or command endpoint scope changed.
• Restore least-privilege permission for the exact upload operations used by the workflow.
• A dry run or non-destructive probe validates access without exposing the credential.
• A real Upload Source Documents run completes and records the uploaded source set.
• Document token ownership/rotation and the failure signal for release operations.
• Do not check a release gate until the successful run is recorded in plan.json.