New features:
- Selective scope groups: `lark auth login --scopes calendar,contacts`
- Incremental authorization: `lark auth login --add --scopes messages`
- List available scopes: `lark auth scopes`
- Enhanced status with granted groups: `lark auth status`
- Per-command scope validation with helpful error messages

Scope groups: calendar, contacts, documents, messages, mail, minutes

Default behavior unchanged - `lark auth login` without flags still
requests all permissions for backward compatibility.