(fix): drop project:all and organization:all from preferred OAuth scopes

The console 'all' scope already covers project and organization access,
so advertising the finer-grained aliases is redundant.

Author: ChiragAgg5k

src/mcp_server_appwrite/constants.py

@@ -55,8 +55,6 @@
     "profile",
     "email",
     "all",
-    "project:all",
-    "organization:all",
 ]
 
 DISCOVERY_TTL_SECONDS = 300.0

tests/unit/test_auth.py

@@ -92,10 +92,7 @@ def test_advertised_scopes_prefer_curated_subset(self):
             scopes = asyncio.run(auth.protected_resource_metadata())["scopes_supported"]
         finally:
             auth._discovery_cache.pop(pid, None)
-        self.assertEqual(
-            scopes,
-            ["openid", "profile", "email", "all", "project:all", "organization:all"],
-        )
+        self.assertEqual(scopes, ["openid", "profile", "email", "all"])
 
     def test_advertised_scopes_drop_preferred_scopes_missing_from_discovery(self):
         pid = auth.configured_project_id()