The interaction and docs_src suites pinned the old scope-less challenge
as a recorded divergence (hosting:auth:scope-403 and the scope half of
hosting:auth:missing-401 / invalid-401 / expired-401). Now that the
middleware emits the RFC 6750 scope attribute, follow the divergence
lifecycle: re-pin those tests to the spec-correct output, drop the
resolved Divergence records, keep the still-open no-credentials
error-code divergence on hosting:auth:missing-401, and refresh the
docstrings and docs page that described the old behaviour.
Claude