pub fn require_scope(scopes: &[String], needed: &str) -> Result<()>Expand description
Scope check (mirrors crate::require_role): Ok(()) when scopes contains
needed or the wildcard "*", otherwise Error::forbidden() (403). The
wildcard is an admin/root grant — a "*" key passes every check.