Follow-up on the review discussion of this issue: the claim that Script Right alone allows running arbitrary Groovy was wrong — every scripting language other than Velocity also requires Programming Right, while a script service is callable with Script Right alone. Recorded in the LLM knowledge base: https://github.com/xwiki/xwiki-dev-llm/pull/66
