The client minted every link code with read and operate only, so linking
with full access always failed: the server wants settings and source control
too. The access-to-scope mapping moves into contracts, the server checks
against it, and the client mints exactly those scopes for the access picked.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>