feat: split direct and delegation scope authority

.yoi/profiles/_base.lua

@@ -8,6 +8,7 @@ return function(opts)
         description = opts.description,
 
         scope = opts.scope or scope.workspace_read(),
+        delegation_scope = opts.delegation_scope,
 
         session = {
             record_event_trace = true,

.yoi/profiles/orchestrator.lua

@@ -1,8 +1,10 @@
 local base = require("_base")
+local scope = require("yoi.scope")
 
 return base {
     slug = "orchestrator",
     description = "Orchestrator role profile: GPT-5.5 with bundled default behavior",
+    delegation_scope = scope.workspace_write(),
     model_ref = "codex-oauth/gpt-5.5",
     language = "Japanese",
 }