bot-review: capability-token packs at /packs/<id>/<token>/
admin: /admin/packs (x-upload-key)