Function resolve_scope 

pub fn resolve_scope(
    _req: &KernelRequest,
    _caller: &PrincipalId,
) -> AuthorityScope

Return the authority scope the caller is exercising for req.

Currently always returns AuthorityScope::Self_ because no KernelRequest variant carries a target_principal field yet.