Cannot get fully private sheets with my-spreadsheet, likely regression when reducing initial permissions

[jpolitz]

Create a spreadsheet with create-spreadsheet("some name"), then access it with my-spreadsheet("some name"), the API reports that permission is denied, but reports the ID for the file!

Guess: This is likely a Drive config issue where requests for sheets by ID are being sent without credentials because of the always-haunting #255.

I make this guess because the first step happens – getting the ID for the file by name, which ought to require some permissions to do! Need to poke into that part of the auth code around sheets API stuff. Probably around

code.pyret.org/src/web/js/google-apis/sheets.js

Line 749 in 18af101

// NOTE(joe): The true as a second argument below drills pretty far down

Might need another API entrypoint for "get private sheet by id".