- Publish the compiled member-token catalog as pact.MemberTokenScopeCatalog
- Imply declared names only when the MCP subject has a ClientID
- Reject a bad Implies and the reserved names backend and offline_access
- CompileAPITokenScopes builds the catalog from the built-ins and the
activated plugins' declarations; a bad name, a redeclared built-in, a
duplicate, an empty label or a missing phrase key fails boot
- POST /tokens, user:token:create and MintAPITokenFor check the
application's own catalog (422 text unchanged); MintAPIToken keeps its
signature with a process-wide fallback for declared scopes
- GET /_user/api/v1/tokens/scopes lists the built-ins and the declared
scopes with translated labels
- built-in scope labels in en and pl; TestMemberTokenScopesSmoke
