refactor(cmd-api-server): pull OAuth2 endpoint scopes from openapi.json

refactor(cmd-api-server): pull OAuth2 endpoint scopes from openapi.json #5849