Viewer tokens retain access after dataset switched from private to public
When a Sanity dataset is changed from private to public, any existing viewer‑scoped API token instantly gains read access to all documents in that dataset. This transition occurs without a new token issuance, without an explicit audit‑log entry linking the token to the new visibility state, and without automatic token revocation, leaving administrators uncer