Add scope-enforcement coverage and integration tests for the oauth-clients CLI across the test matrix.