fix: add users:read to user token scopes for DM resolution

ResolveDM calls loadUsers() which requires users:read. Without it,
@name DM resolution fails even when conversation scopes are present.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: isaacrowntree

pkg/cmd/app/create.go

@@ -94,6 +94,7 @@ var appManifest = map[string]interface{}{
 				"search:read",
 				"stars:read",
 				"stars:write",
+				"users:read",
 				"users.profile:read",
 				"users.profile:write",
 			},