Pull AI-generated articles from AI CMO into this site on a schedule. Key-only activation — no application password, no inbound access.
- The plugin no longer requires full administrator rights. It now checks its own `manage_aicmo_connector` capability, so access can be granted to custom roles.
- New "Access" page (AI CMO → Access) where an administrator chooses which roles may use the plugin. The Administrator role is always allowed and cannot be unchecked, so a site owner cannot lock themselves out.
- Only administrators can open the Access page itself — a granted role cannot widen its own access.
- Scheduled publishing is unchanged: it runs without a signed-in user and never depended on these permissions.
- Note: this capability is privileged. A granted role can change the API connection, run a pull immediately, publish the fetched articles, and connect Google Search Console.
