Meta permissions

Permissions are separated between reading account state and applying approved changes.

1. 1.Grant only the scopes shown during connection.
2. 2.Keep the selected ad account bound to the correct Glimmio business account.
3. 3.Reconnect when Meta revokes or expires a required grant.
4. 4.Provider write capability remains blocked until Glimmio has verified the relevant mutation contract.