List scopes grantable to personal access tokens

Returns the catalogue of PAT-grantable scopes grouped by category. Backoffice scopes are only included for SurrealDB staff (verified @surrealdb.com email); all other callers see the user-facing scopes only.