Clarify Scope struct serves both JWT and API key authentication

[Copilot]

The Scope struct in internal/claim/rbac/rbac.go is used for both management API (JWT tokens) and client API (API keys) authentication, but the comment only mentioned "user" context.

Changes

• Updated Scope struct comment to explicitly document dual authentication purpose:
  • Management API: JWT-authenticated admin users
  • Client API: API key authentication

// Scope represents an authenticated user or API key in the context.
// It is used for both the management API (JWT authentication) and the client API (API key authentication).
type Scope struct {
    OrganizationID uuid.UUID
    ProjectID      uuid.UUID
}

The struct is populated by WithJWT() for admin users and WithKey() for API keys in internal/http/auth/auth.go.

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.