ppy
Add API route to moderate forum topic
continuation of #6072
"moderate" as in pin, lock, move, delete. should require a new scope as "forum.write" is not quite the same level of permission as managing a forum
for reference my use case is pinning/unpinning on Project Loved forum each round and locking voting threads when they are complete. also having people in the Loved group able to post on that forum in the first place
need some opinion for how to handle the permissions here -- precedent so far is that API routes ignore any permissions gained from groups/etc, but in this case I want to explicitly allow it. I'm hesitant to make a new scope like forum.moderate because that's a lot of permission to give away when users like GMT or Admin authorize with it...
The only way I could see this working is if it was limited to a bot account class. Seems like we would never want to be giving out any kind of moderation abilities via the API in any normal scenario. Also there should be some warning message on bot accounts around the oauth section if we go with that direction.
