discord:read · discord:write · ceiling configureStorefront
GET never returns clientSecret or botToken — only hasClientSecret / hasBotToken.
Write the bot credentials in PATCH when rotating them. Incomplete credentials return 400. Discord OAuth install still happens in the dashboard.