pub fn scope_intersection(a: &[String], b: &[String]) -> Vec<String>
Compute the intersection of two scope sets, respecting wildcard rules. Returns only scopes that are covered by BOTH inputs.