Function is_scope_subset 

pub fn is_scope_subset(
    child: &DelegationScope,
    parent: &DelegationScope,
) -> bool

Checks if child scope is a subset of parent scope (no-amplification rule §9.6).

A child scope is a subset when:

• Every action in child is present in parent (or parent has no actions, meaning wildcard)
• Every resource in child is present in parent (or parent has no restrictions)
• Every chain in child is present in parent (or parent has no restrictions)
• Child limits are at least as restrictive as parent limits