Apply token scope to the head fork of .diff and .patch compares
The head fork is checked with the request credential rather than the token owner's full permission, and every refusal returns the same not-found. Assisted-by: Crush
3 files changed+38−16
Rendering diff…