Use the public 'from mcp.server import Server' in tests/client/test_auth.py,
matching __all__ and the sibling test files, and reword the _FirstChallenge
docstring which still claimed the bearer middleware cannot emit scope= in its
challenge (no longer true since the scope attribute fix).
The interaction and docs_src suites pinned the old scope-less challenge
as a recorded divergence (hosting:auth:scope-403 and the scope half of
hosting:auth:missing-401 / invalid-401 / expired-401). Now that the
middleware emits the RFC 6750 scope attribute, follow the divergence
lifecycle: re-pin those tests to the spec-correct output, drop the
resolved Divergence records, keep the still-open no-credentials
error-code divergence on hosting:auth:missing-401, and refresh the
docstrings and docs page that described the old behaviour.
Claude