Boski: permissions & privacy

Partial · Set a no-email/no-spend rule; Boski checked first on both temptations, while Channels stayed all-or-nothing and data delete stayed off.