* fix: enforce token path scopes on GET /raw_apps/list
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* fix: apply the raw app scope filter before the page limit
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* test: cover the bare prefix path in the raw app scope test
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>