420 Swap permissions

Wallet connection does not authorize a swap. Protected execution requires an explicit transaction or scoped capability with the correct market/asset/action and amount bounds.

Token allowances should be minimized and reviewed. Revoke or reduce reusable approvals/capabilities when no longer needed.