fix: support scoped RomM API token for scan trigger

romm-automation-truenas.env.example

@@ -60,6 +60,11 @@ IGDB_CLIENT_SECRET=fill_me
 ROMM_SERVER_URL=http://your-romm-host:port
 ROMM_USERNAME=fill_me
 ROMM_PASSWORD=fill_me
+# Optional but recommended for the import worker scan trigger. Create a RomM API
+# token with the Run tasks / tasks.run permission and paste it in the real env.
+# Username/password may pass basic library checks but still receive HTTP 403 when
+# trying to run /api/tasks/run/scan_library without this scope.
+ROMM_API_TOKEN=
 
 # Romarr image. Upstream docs list romarr/romarr:latest, but the public image was not pullable
 # when this scaffold was created. Override this if we build/publish a local image.