fix(gitea-bot): add write:organization scope so bot can create repos

Without this the bot PAT 403s on POST /orgs/{org}/repos, which is
the single most important operation — creating new project repos
inside the workspace's Gitea org.

Made-with: Cursor

app/api/projects/[projectId]/agent/sessions/[sessionId]/events/route.ts

@@ -6,8 +6,7 @@
  *   Batch append from vibn-agent-runner (x-agent-runner-secret).
  */
 import { NextResponse } from "next/server";
-import { getServerSession } from "next-auth";
-import { authOptions } from "@/lib/auth/authOptions";
+import { authSession } from "@/lib/auth/session-server";
 import { query, getPool } from "@/lib/db-postgres";
 
 export interface AgentSessionEventRow {
@@ -23,7 +22,7 @@ export async function GET(
 ) {
   try {
     const { projectId, sessionId } = await params;
-    const session = await getServerSession(authOptions);
+    const session = await authSession();
     if (!session?.user?.email) {
       return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
     }