Override OIDC scopes even when using well-known URL

[DecDuck]

If you set the OIDC_SCOPES but you are using a well-known URL, it'll default to *all scopes, as provided by the well-known. The env variable should override.