Add granular oauth scopes

[timjuenemann]

The only thing preventing me from using it rn is that it wants access to everything. It would be great if spark could request only the permissions it actually needs.

[jobiwanken0bi]

Right now Spark requires broader scopes to allow for things like Bluesky crossposting. We will look into ways we can reduce these further!