Custom OAuth scopes

Define scopes per OAuth app and advertise them to MCP clients through OAuth metadata.