Merge pull request #38 from automagik-dev/feat/m365-pilot-scope-guard

feat: guard M365 pilot scopes

Author: namastex888

.deadcode-baseline.txt

@@ -39,6 +39,9 @@ internal/googleauth/oauth_flow_manual_redirect.go:54:6: unreachable func: extrac
 internal/googleauth/scopes.go:34:6: unreachable func: ScopesForCommands
 internal/googleauth/scopes.go:72:6: unreachable func: AllScopes
 internal/googleauth/scopes.go:96:6: unreachable func: knownCommandNames
+internal/msauth/scopes.go:17:6: unreachable func: canonicalPilotScope
+internal/msauth/scopes.go:29:6: unreachable func: PilotAllowedScopes
+internal/msauth/scopes.go:40:6: unreachable func: GuardPilotScopes
 internal/officetext/extract.go:46:6: unreachable func: ExtractTextByMIME
 internal/secrets/keychain_other.go:11:6: unreachable func: CheckKeychainLocked
 internal/secrets/keychain_other.go:16:6: unreachable func: UnlockKeychain