Added Tool-Level Scope Validation to mcp-handler

This PR allows you to define specific scopes in your OAuth token, to be validated against specific tools in your MCP server.

If the token doesn't possess the right scopes, it will return a 403 insufficient scopes, in accordance with the MCP spec.