Scopes the resource server understands (advertised, not necessarily required per request).
final List<String>? scopesSupported;