Surface custom scopes on consent screen for first-party applications