Crisp credentials: match the token to the integration's workspace scope

Crisp's authentication guide distinguishes single-workspace Website Tokens from Plugin Tokens used for authorized multi-workspace integrations. Choose the right model for the Crisp API workflow.

Keep token pairs private and rehearse rotation, which invalidates the old credentials. A support integration should fail clearly for an unauthorized workspace rather than silently selecting another one.