OAuth Scopes Explained: Building Secure Third-Party Access for Your Platform