pub fn parse_scope(s: &str) -> Result<Scope, CliError>
Parse a scope string at a boundary. Rejects unknown values (no silent fallback).