-- Public read-only sharing for lists.
-- NULL share_token = private (default). A non-NULL token is an unguessable
-- secret: anyone holding it can view the list read-only at /api/shared/{token},
-- no account required. Revoking (unshare) sets it back to NULL.
ALTER TABLE lists
    ADD COLUMN share_token TEXT UNIQUE;