narrow down oauth permissions

[codl]

forget still uses old scopes read and write, mastodon has had tighter scopes like read:statuses for a while, it would be nice to use those

https://docs.joinmastodon.org/api/oauth-scopes/

idk if those work on pleroma or other api-kinda-compatibles but i don't officially support them anyway