Add comprehensive API token permissions documentation

[jacobgoren-sb]

Summary

This PR adds comprehensive documentation for API token permissions (scopes) required by the Workato CLI. Users often don't know which permissions to grant when creating API clients, leading to 403 Forbidden errors. This documentation provides clear guidance on permission requirements.

Changes

New Documentation: docs/PERMISSIONS.md

• Quick Start Table: Shows standard development permissions needed for typical CLI workflows
• Complete Permission Reference: All available scopes organized by category with:
  • Permission name and description
  • HTTP method and endpoint
  • Which CLI commands use each permission
• Recommended Permission Sets:
  • Basic CLI Usage (Read-Only)
  • Standard Development (most common)
  • Full CLI Access
• Common CLI Workflows: Required permissions for init, pull, push, recipes start/stop, etc.
• Troubleshooting Guide: How to resolve 403 and 401 errors

Updated: README.md

• Added permissions guidance in "Getting Your API Token" section
• Lists standard development permissions needed
• Links to detailed PERMISSIONS.md documentation
• Added PERMISSIONS.md to "Next Steps" section

Benefits

1. Reduces friction for new users setting up the CLI
2. Prevents 403 errors by documenting required scopes upfront
3. Improves onboarding with clear permission requirements
4. Provides reference for troubleshooting permission issues

Scope Category	Permissions Required
Workspace Details	Get details
Projects & Folders	List, Create
Recipes	List, Create, Update, Start, Stop, Update connection
Connections	List, Create, Update, Get picklist values
Recipe Lifecycle Management	Get/Download/Export/Import package
Export Manifests	Create, Show, Get folder assets

🤖 Generated with Claude Code