Panel scopes

Public scopes include staff, settings, events, payouts, users, applications, conversions, complaints, hostform, activity, logs, karaoke, support, bans, and role_tabs. The server always enforces a scope; hiding a tab is not a security boundary.