fix(gitea-bot): add write:organization scope so bot can create repos

Without this the bot PAT 403s on POST /orgs/{org}/repos, which is
the single most important operation — creating new project repos
inside the workspace's Gitea org.

Made-with: Cursor

app/api/projects/[projectId]/agent/sessions/[sessionId]/events/stream/route.ts

@@ -2,8 +2,7 @@
  * GET /api/projects/.../agent/sessions/.../events/stream?afterSeq=0
  * Server-Sent Events: tail agent_session_events while the session is active.
  */
-import { getServerSession } from "next-auth";
-import { authOptions } from "@/lib/auth/authOptions";
+import { authSession } from "@/lib/auth/session-server";
 import { query, queryOne } from "@/lib/db-postgres";
 
 export const dynamic = "force-dynamic";
@@ -17,7 +16,7 @@ export async function GET(
   req: Request,
   { params }: { params: Promise<{ projectId: string; sessionId: string }> }
 ) {
-  const session = await getServerSession(authOptions);
+  const session = await authSession();
   if (!session?.user?.email) {
     return new Response("Unauthorized", { status: 401 });
   }