Booking requests

Owner-scoped reservation requests. Read path is separated from public submit traffic and requires the dedicated admin token.