fix(web,mobile): a minted pairing code carries the access the link asks for

The client minted every link code with read and operate only, so linking
with full access always failed: the server wants settings and source control
too. The access-to-scope mapping moves into contracts, the server checks
against it, and the client mints exactly those scopes for the access picked.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
439ea2a27fJulius Marminge committed on 10/20/2026, 11:06:42 PMparenta1d5f8d

Checks

All checks passed
15 files changedLine totals unavailable