Unique bearer token scope for GWDataFind read/write

As of %GWDataFind Server 1.2.0 the default GWDataFind Server configuration declares the following scope as required for any bearer token to authorise a request:

read:/frames

AFAIK this is the same scope required to read proprietary data from CVMFS.

• Should we have a unique scope for GWDataFind queries?
• How do we go about 'registering' new scopes?

cc @duncan.meacher @ron.tapia @james-clark @stuart.anderson @pfc @warren-anderson