Fix validator app registration: Add permissions scope