Add scoped operator controls and durable worker release queue

config/api.example.toml

@@ -19,3 +19,10 @@ planning_mode = "joint"
 id = "wow-capture-worker"
 token_env = "VBA_INTAKE_TOKEN"
 projects = ["viano-core"]
+
+# Separate operator identity/token. Submission clients remain non-operators.
+# [[clients]]
+# id = "human-operator"
+# token_env = "VBA_OPERATOR_TOKEN"
+# projects = ["viano-core"]
+# operator = true